diff --git a/.changelog/3185.txt b/.changelog/3185.txt
new file mode 100644
index 0000000000..59f4bb4d80
--- /dev/null
+++ b/.changelog/3185.txt
@@ -0,0 +1,3 @@
+```release-note:new-resource
+tencentcloud_teo_l7_acc_rule
+```
\ No newline at end of file
diff --git a/tencentcloud/provider.go b/tencentcloud/provider.go
index 39b4db63d1..f358099b64 100644
--- a/tencentcloud/provider.go
+++ b/tencentcloud/provider.go
@@ -1769,6 +1769,7 @@ func Provider() *schema.Provider {
"tencentcloud_teo_origin_group": teo.ResourceTencentCloudTeoOriginGroup(),
"tencentcloud_teo_l4_proxy": teo.ResourceTencentCloudTeoL4Proxy(),
"tencentcloud_teo_l4_proxy_rule": teo.ResourceTencentCloudTeoL4ProxyRule(),
+ "tencentcloud_teo_l7_acc_rule": teo.ResourceTencentCloudTeoL7AccRule(),
"tencentcloud_teo_l7_acc_setting": teo.ResourceTencentCloudTeoL7AccSetting(),
"tencentcloud_teo_rule_engine": teo.ResourceTencentCloudTeoRuleEngine(),
"tencentcloud_teo_ownership_verify": teo.ResourceTencentCloudTeoOwnershipVerify(),
diff --git a/tencentcloud/provider.md b/tencentcloud/provider.md
index 0ea2c1989a..9b38a2449e 100644
--- a/tencentcloud/provider.md
+++ b/tencentcloud/provider.md
@@ -1483,6 +1483,7 @@ tencentcloud_teo_function
tencentcloud_teo_function_rule
tencentcloud_teo_function_rule_priority
tencentcloud_teo_function_runtime_environment
+tencentcloud_teo_l7_acc_rule
tencentcloud_teo_l7_acc_setting
TencentCloud ServiceMesh(TCM)
diff --git a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.go b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.go
new file mode 100644
index 0000000000..7b31497981
--- /dev/null
+++ b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.go
@@ -0,0 +1,345 @@
+// Code generated by iacg; DO NOT EDIT.
+package teo
+
+import (
+ "context"
+ "errors"
+ "log"
+
+ "github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+ "github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+ teov20220901 "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo/v20220901"
+ tccommon "github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/common"
+ "github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/internal/helper"
+)
+
+func ResourceTencentCloudTeoL7AccRule() *schema.Resource {
+ return &schema.Resource{
+ Create: resourceTencentCloudTeoL7AccRuleCreate,
+ Read: resourceTencentCloudTeoL7AccRuleRead,
+ Update: resourceTencentCloudTeoL7AccRuleUpdate,
+ Delete: resourceTencentCloudTeoL7AccRuleDelete,
+ Importer: &schema.ResourceImporter{
+ State: schema.ImportStatePassthrough,
+ },
+ Schema: map[string]*schema.Schema{
+ "zone_id": {
+ Type: schema.TypeString,
+ Required: true,
+ ForceNew: true,
+ Description: "Zone id.",
+ },
+
+ "rules": {
+ Type: schema.TypeList,
+ Optional: true,
+ Computed: true,
+ Description: "Rules content.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "rule_id": {
+ Type: schema.TypeString,
+ Computed: true,
+ Description: "Rule ID. Unique identifier of the rule.",
+ },
+ "status": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Rule status. The possible values are: `enable`: enabled; `disable`: disabled.",
+ },
+ "rule_name": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Rule name. The name length limit is 255 characters.",
+ },
+ "description": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Rule annotation. multiple annotations can be added.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ "rule_priority": {
+ Type: schema.TypeInt,
+ // Optional: true,
+ Computed: true,
+ Description: "Rule priority. only used as an output parameter.",
+ },
+ "branches": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.",
+ Elem: &schema.Resource{
+ Schema: TencentTeoL7RuleBranchBasicInfo(1),
+ },
+ },
+ },
+ },
+ },
+ },
+ }
+}
+
+func resourceTencentCloudTeoL7AccRuleCreate(d *schema.ResourceData, meta interface{}) error {
+ defer tccommon.LogElapsed("resource.tencentcloud_teo_l7_acc_rule.create")()
+ defer tccommon.InconsistentCheck(d, meta)()
+
+ logId := tccommon.GetLogId(tccommon.ContextNil)
+
+ ctx := tccommon.NewResourceLifeCycleHandleFuncContext(context.Background(), logId, d, meta)
+
+ var (
+ zoneId string
+ )
+ var (
+ request = teov20220901.NewCreateL7AccRulesRequest()
+ response = teov20220901.NewCreateL7AccRulesResponse()
+ )
+
+ if v, ok := d.GetOk("zone_id"); ok {
+ zoneId = v.(string)
+ request.ZoneId = helper.String(v.(string))
+ }
+
+ if v, ok := d.GetOk("rules"); ok {
+ for _, item := range v.([]interface{}) {
+ rulesMap := item.(map[string]interface{})
+ ruleEngineItem := teov20220901.RuleEngineItem{}
+ if v, ok := rulesMap["status"].(string); ok && v != "" {
+ ruleEngineItem.Status = helper.String(v)
+ }
+ if v, ok := rulesMap["rule_name"].(string); ok && v != "" {
+ ruleEngineItem.RuleName = helper.String(v)
+ }
+ if v, ok := rulesMap["description"]; ok {
+ descriptionSet := v.([]interface{})
+ for i := range descriptionSet {
+ description := descriptionSet[i].(string)
+ ruleEngineItem.Description = append(ruleEngineItem.Description, helper.String(description))
+ }
+ }
+ // if v, ok := rulesMap["rule_priority"].(int); ok {
+ // ruleEngineItem.RulePriority = helper.IntInt64(v)
+ // }
+ if _, ok := rulesMap["branches"]; ok {
+ ruleEngineItem.Branches = resourceTencentCloudTeoL7AccRuleGetBranchs(rulesMap)
+ }
+
+ request.Rules = append(request.Rules, &ruleEngineItem)
+ }
+ }
+
+ reqErr := resource.Retry(tccommon.WriteRetryTimeout, func() *resource.RetryError {
+ result, e := meta.(tccommon.ProviderMeta).GetAPIV3Conn().UseTeoV20220901Client().CreateL7AccRulesWithContext(ctx, request)
+ if e != nil {
+ return tccommon.RetryError(e)
+ } else {
+ log.Printf("[DEBUG]%s api[%s] success, request body [%s], response body [%s]\n", logId, request.GetAction(), request.ToJsonString(), result.ToJsonString())
+ }
+ response = result
+ return nil
+ })
+ if reqErr != nil {
+ log.Printf("[CRITAL]%s create teo l7 acc rule failed, reason:%+v", logId, reqErr)
+ return reqErr
+ }
+
+ d.SetId(zoneId)
+
+ _ = response
+ return resourceTencentCloudTeoL7AccRuleRead(d, meta)
+}
+
+func resourceTencentCloudTeoL7AccRuleRead(d *schema.ResourceData, meta interface{}) error {
+ defer tccommon.LogElapsed("resource.tencentcloud_teo_l7_acc_rule.read")()
+ defer tccommon.InconsistentCheck(d, meta)()
+
+ logId := tccommon.GetLogId(tccommon.ContextNil)
+
+ ctx := tccommon.NewResourceLifeCycleHandleFuncContext(context.Background(), logId, d, meta)
+
+ service := TeoService{client: meta.(tccommon.ProviderMeta).GetAPIV3Conn()}
+
+ zoneId := d.Id()
+
+ _ = d.Set("zone_id", zoneId)
+
+ respData, err := service.DescribeTeoL7AccRuleById(ctx, zoneId)
+ if err != nil {
+ return err
+ }
+
+ if respData == nil {
+ d.SetId("")
+ log.Printf("[WARN]%s resource `teo_l7_acc_rule` [%s] not found, please check if it has been deleted.\n", logId, d.Id())
+ return nil
+ }
+ rulesList := make([]map[string]interface{}, 0, len(respData.Rules))
+ if respData.Rules != nil {
+ for _, rules := range respData.Rules {
+ rulesMap := map[string]interface{}{}
+
+ if rules.RuleId != nil {
+ rulesMap["rule_id"] = rules.RuleId
+ }
+
+ if rules.Status != nil {
+ rulesMap["status"] = rules.Status
+ }
+
+ if rules.RuleName != nil {
+ rulesMap["rule_name"] = rules.RuleName
+ }
+
+ if rules.Description != nil {
+ rulesMap["description"] = rules.Description
+ }
+
+ if rules.RulePriority != nil {
+ rulesMap["rule_priority"] = rules.RulePriority
+ }
+
+ if rules.Branches != nil {
+ rulesMap["branches"] = resourceTencentCloudTeoL7AccRuleSetBranchs(rules.Branches)
+ }
+ rulesList = append(rulesList, rulesMap)
+ }
+
+ _ = d.Set("rules", rulesList)
+ }
+
+ _ = zoneId
+ return nil
+}
+
+func resourceTencentCloudTeoL7AccRuleUpdate(d *schema.ResourceData, meta interface{}) error {
+ defer tccommon.LogElapsed("resource.tencentcloud_teo_l7_acc_rule.update")()
+ defer tccommon.InconsistentCheck(d, meta)()
+
+ logId := tccommon.GetLogId(tccommon.ContextNil)
+
+ ctx := tccommon.NewResourceLifeCycleHandleFuncContext(context.Background(), logId, d, meta)
+
+ zoneId := d.Id()
+
+ needChange := false
+ mutableArgs := []string{"rules"}
+ for _, v := range mutableArgs {
+ if d.HasChange(v) {
+ needChange = true
+ break
+ }
+ }
+
+ if needChange {
+ if v, ok := d.GetOk("rules"); ok {
+ for _, item := range v.([]interface{}) {
+ request := teov20220901.NewModifyL7AccRuleRequest()
+
+ if v, ok := d.GetOk("zone_id"); ok {
+ request.ZoneId = helper.String(v.(string))
+ }
+ rulesMap := item.(map[string]interface{})
+ ruleEngineItem := teov20220901.RuleEngineItem{}
+ if v, ok := rulesMap["status"].(string); ok && v != "" {
+ ruleEngineItem.Status = helper.String(v)
+ }
+ if v, ok := rulesMap["rule_id"].(string); ok && v != "" {
+ ruleEngineItem.RuleId = helper.String(v)
+ }
+ if v, ok := rulesMap["rule_name"].(string); ok && v != "" {
+ ruleEngineItem.RuleName = helper.String(v)
+ }
+ if v, ok := rulesMap["description"]; ok {
+ descriptionSet := v.([]interface{})
+ for i := range descriptionSet {
+ description := descriptionSet[i].(string)
+ ruleEngineItem.Description = append(ruleEngineItem.Description, helper.String(description))
+ }
+ }
+ // if v, ok := rulesMap["rule_priority"].(int); ok {
+ // ruleEngineItem.RulePriority = helper.IntInt64(v)
+ // }
+
+ if _, ok := rulesMap["branches"]; ok {
+ ruleEngineItem.Branches = resourceTencentCloudTeoL7AccRuleGetBranchs(rulesMap)
+ }
+ request.Rule = &ruleEngineItem
+
+ reqErr := resource.Retry(tccommon.WriteRetryTimeout, func() *resource.RetryError {
+ result, e := meta.(tccommon.ProviderMeta).GetAPIV3Conn().UseTeoV20220901Client().ModifyL7AccRuleWithContext(ctx, request)
+ if e != nil {
+ return tccommon.RetryError(e)
+ } else {
+ log.Printf("[DEBUG]%s api[%s] success, request body [%s], response body [%s]\n", logId, request.GetAction(), request.ToJsonString(), result.ToJsonString())
+ }
+ return nil
+ })
+ if reqErr != nil {
+ log.Printf("[CRITAL]%s update teo l7 acc rule failed, reason:%+v", logId, reqErr)
+ return reqErr
+ }
+ }
+ }
+ }
+
+ _ = zoneId
+ return resourceTencentCloudTeoL7AccRuleRead(d, meta)
+}
+
+func resourceTencentCloudTeoL7AccRuleDelete(d *schema.ResourceData, meta interface{}) error {
+ defer tccommon.LogElapsed("resource.tencentcloud_teo_l7_acc_rule.delete")()
+ defer tccommon.InconsistentCheck(d, meta)()
+
+ logId := tccommon.GetLogId(tccommon.ContextNil)
+ ctx := tccommon.NewResourceLifeCycleHandleFuncContext(context.Background(), logId, d, meta)
+
+ zoneId := d.Id()
+
+ var (
+ request = teov20220901.NewDeleteL7AccRulesRequest()
+ response = teov20220901.NewDeleteL7AccRulesResponse()
+ )
+ request.ZoneId = helper.String(zoneId)
+
+ if v, ok := d.GetOk("rule_ids"); ok {
+ ruleIdsSet := v.([]interface{})
+ for i := range ruleIdsSet {
+ ruleIds := ruleIdsSet[i].(string)
+ request.RuleIds = append(request.RuleIds, helper.String(ruleIds))
+ }
+ }
+
+ if v, ok := d.GetOk("rules"); ok {
+ for _, item := range v.([]interface{}) {
+ rulesMap := item.(map[string]interface{})
+ if v, ok := rulesMap["rule_id"].(string); ok && v != "" {
+ request.RuleIds = append(request.RuleIds, helper.String(v))
+ }
+ }
+ }
+
+ if len(request.RuleIds) == 0 {
+ return errors.New("[CRITAL]%s delete teo l7 acc rule failed, rule_ids is empty")
+ }
+
+ reqErr := resource.Retry(tccommon.WriteRetryTimeout, func() *resource.RetryError {
+ result, e := meta.(tccommon.ProviderMeta).GetAPIV3Conn().UseTeoV20220901Client().DeleteL7AccRulesWithContext(ctx, request)
+ if e != nil {
+ return tccommon.RetryError(e)
+ } else {
+ log.Printf("[DEBUG]%s api[%s] success, request body [%s], response body [%s]\n", logId, request.GetAction(), request.ToJsonString(), result.ToJsonString())
+ }
+ response = result
+ return nil
+ })
+ if reqErr != nil {
+ log.Printf("[CRITAL]%s delete teo l7 acc rule failed, reason:%+v", logId, reqErr)
+ return reqErr
+ }
+
+ _ = response
+ _ = zoneId
+ return nil
+}
diff --git a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.md b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.md
new file mode 100644
index 0000000000..27781c6277
--- /dev/null
+++ b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule.md
@@ -0,0 +1,320 @@
+Provides a resource to create a teo l7_acc_rule
+
+Example Usage
+
+```hcl
+resource "tencentcloud_teo_l7_acc_rule" "teo_l7_acc_rule" {
+ zone_id = "zone-36bjhygh1bxe"
+ rules {
+ description = ["1"]
+ rule_name = "网站加速"
+ status = "disable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "on"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-1"]
+ branches {
+ condition = "lower($${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-2"]
+ branches {
+ condition = "$${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"
+ actions {
+ name = "MaxAge"
+ max_age_parameters {
+ cache_time = 3600
+ follow_origin = "off"
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["2"]
+ rule_name = "音视频直播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["2-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['m3u8', 'mpd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 1
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['ts', 'mp4', 'm4a', 'm4s']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 86400
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["3"]
+ rule_name = "大文件下载"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = null
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["3-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["4"]
+ rule_name = "音视频点播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["4-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["5"]
+ rule_name = "API 加速"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "SmartRouting"
+ smart_routing_parameters {
+ switch = "off"
+ }
+ }
+ }
+ }
+ rules {
+ description = ["6"]
+ rule_name = "WordPress 建站"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["6-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['gif', 'png', 'bmp', 'jpeg', 'tif', 'tiff', 'zip', 'exe', 'wmv', 'swf', 'mp3', 'wma', 'rar', 'css', 'flv', 'mp4', 'txt', 'ico', 'js']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 604800
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['aspx', 'jsp', 'php', 'asp', 'do', 'dwr', 'cgi', 'fcgi', 'action', 'ashx', 'axd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/wp-admin/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+}
+
+```
+Import
+
+teo l7_acc_rule can be imported using the zone_id, e.g.
+````
+terraform import tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule zone-297z8rf93cfw
+````
\ No newline at end of file
diff --git a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go
new file mode 100644
index 0000000000..ab2e3d7d5b
--- /dev/null
+++ b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_extension.go
@@ -0,0 +1,2466 @@
+package teo
+
+import (
+ "github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+ teo "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo/v20220901"
+ teov20220901 "github.com/tencentcloud/tencentcloud-sdk-go/tencentcloud/teo/v20220901"
+ "github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/internal/helper"
+)
+
+func TencentTeoL7RuleBranchBasicInfo(depth int) map[string]*schema.Schema {
+ schemaMap := map[string]*schema.Schema{
+ "condition": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Match condition. https://www.tencentcloud.com/document/product/1145/54759.",
+ },
+ "actions": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "name": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Operation name. The name needs to correspond to the parameter structure, for example, if Name=Cache, CacheParameters is required.\n- `Cache`: Node cache TTL;\n- `CacheKey`: Custom Cache Key;\n- `CachePrefresh`: Cache pre-refresh;\n- `AccessURLRedirect`: Access URL redirection;\n- `UpstreamURLRewrite`: Back-to-origin URL rewrite;\n- `QUIC`: QUIC;\n- `WebSocket`: WebSocket;\n- `Authentication`: Token authentication;\n- `MaxAge`: Browser cache TTL;\n- `StatusCodeCache`: Status code cache TTL;\n- `OfflineCache`: Offline cache;\n- `SmartRouting`: Smart acceleration;\n- `RangeOriginPull`: Segment back-to-origin;\n- `UpstreamHTTP2`: HTTP2 back-to-origin;\n- `HostHeader`: Host Header rewrite;\n- `ForceRedirectHTTPS`: Access protocol forced HTTPS jump configuration;\n- `OriginPullProtocol`: Back-to-origin HTTPS;\n- `Compression`: Smart compression configuration;\n- `HSTS`: HSTS;\n- `ClientIPHeader`: Header information configuration for storing client request IP;\n- `OCSPStapling`: OCSP stapling;\n- `HTTP2`: HTTP2 Access;\n- `PostMaxSize`: POST request upload file streaming maximum limit configuration;\n- `ClientIPCountry`: Carry client IP region information when returning to the source;\n- `UpstreamFollowRedirect`: Return to the source follow redirection parameter configuration;\n- `UpstreamRequest`: Return to the source request parameters;\n- `TLSConfig`: SSL/TLS security;\n- `ModifyOrigin`: Modify the source station;\n- `HTTPUpstreamTimeout`: Seven-layer return to the source timeout configuration;\n- `HttpResponse`: HTTP response;\n- `ErrorPage`: Custom error page;\n- `ModifyResponseHeader`: Modify HTTP node response header;\n- `ModifyRequestHeader`: Modify HTTP node request header;\n- `ResponseSpeedLimit`: Single connection download speed limit.\n- `SetContentIdentifierParameters`: Set content identifier.",
+ },
+ "cache_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Node cache ttl configuration parameter. when name is cache, this parameter is required.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "follow_origin": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Cache follows origin server. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Whether to enable the configuration of following the origin server. Valid values: `on`: Enable; `off`: Disable.",
+ },
+ "default_cache": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to cache when an origin server does not return the cache-control header. this field is required when switch is on; when switch is off, this field is not required and will be ineffective if filled. valid values: On: cache; Off: do not cache.",
+ },
+ "default_cache_strategy": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to use the default caching policy when an origin server does not return the cache-control header. this field is required when defaultcache is set to on; otherwise, it is ineffective. when defaultcachetime is not 0, this field should be off. valid values: on: use the default caching policy. off: do not use the default caching policy.",
+ },
+ "default_cache_time": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "The default cache time in seconds when an origin server does not return the cache-control header. the value ranges from 0 to 315360000. this field is required when defaultcache is set to on; otherwise, it is ineffective. when defaultcachestrategy is on, this field should be 0.",
+ },
+ },
+ },
+ },
+ "no_cache": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "No cache. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Whether to enable no-cache configuration. Valid values: `on`: Enable; `off`: Disable.",
+ },
+ },
+ },
+ },
+ "custom_time": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Custom cache time. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Custom cache time switch. values: `on`: Enable; `off`: Disable.",
+ },
+ "ignore_cache_control": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Ignore origin server cachecontrol switch. values: `on`: Enable; `off`: Disable.",
+ },
+ "cache_time": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Custom cache time value, unit: seconds. value range: 0-315360000.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "cache_key_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Custom cache key configuration parameter. when name is cachekey, this parameter is required.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "full_url_cache": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Switch for retaining the complete query string. values: on: enable; off: disable.",
+ },
+ "query_string": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration parameter for retaining the query string. this field and fullurlcache must be set simultaneously, but cannot both be on.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Query string retain/ignore specified parameter switch. valid values are: on: enable; off: disable.",
+ },
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Actions to retain/ignore specified parameters in the query string. values: `includeCustom`: retain partial parameters. `excludeCustom`: ignore partial parameters.note: this field is required when switch is on. when switch is off, this field is not required and will not take effect if filled.",
+ },
+ "values": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "A list of parameter names to keep/ignore in the query string.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ "ignore_case": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Switch for ignoring case. values: enable; off: disable.note: at least one of fullurlcache, ignorecase, header, scheme, or cookie must be configured.",
+ },
+ "header": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HTTP request header configuration parameters. at least one of the following configurations must be set: fullurlcache, ignorecase, header, scheme, cookie.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable feature. values: on: enable; off: disable.",
+ },
+ "values": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Custom cache key http request header list. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ "scheme": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Request protocol switch. valid values: on: enable; off: disable.",
+ },
+ "cookie": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Cookie configuration parameters. at least one of the following configurations must be set: fullurlcache, ignorecase, header, scheme, cookie.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable feature. values: on: enable; off: disable.",
+ },
+ "action": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Cache action. values: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters. note: when switch is on, this field is required. when switch is off, this field is not required and will not take effect if filled.",
+ },
+ "values": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Custom cache key cookie name list.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "cache_prefresh_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "The cache prefresh configuration parameter. this parameter is required when name is cacheprefresh.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable cache prefresh. values: enable; off: disable.",
+ },
+ "cache_time_percent": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Prefresh interval set as a percentage of the node cache time. value range: 1-99. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.",
+ },
+ },
+ },
+ },
+ "access_url_redirect_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "The access url redirection configuration parameter. this parameter is required when name is accessurlredirect.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "status_code": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Status code. valid values: 301, 302, 303, 307, 308.",
+ },
+ "protocol": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Target request protocol. valid values: http: target request protocol http; https: target request protocol https; follow: follow the request.",
+ },
+ "host_name": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Target hostname.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Target hostname configuration, valid values are: follow: follow the request; custom: custom.",
+ },
+ "value": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Custom value for target hostname, maximum length is 1024.",
+ },
+ },
+ },
+ },
+ "url_path": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Target path.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Action to be executed. values: follow: follow the request; custom: custom; regex: regular expression matching.",
+ },
+ "regex": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Regular expression matching expression, length range is 1-1024. note: when action is regex, this field is required; when action is follow or custom, this field is not required and will not take effect if filled.",
+ },
+ "value": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Redirect target url, length range is 1-1024.note: when action is regex or custom, this field is required; when action is follow, this field is not required and will not take effect if filled.",
+ },
+ },
+ },
+ },
+ "query_string": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Carry query parameters.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Action to be executed. values: full: retain all; ignore: ignore all.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "upstream_url_rewrite_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "The origin-pull url rewrite configuration parameter. this parameter is required when name is upstreamurlrewrite.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "type": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Origin-Pull url rewriting type, only path is supported.",
+ },
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Origin-Pull url rewrite action. valid values are: replace: replace the path prefix; addPrefix: add the path prefix; rmvPrefix: remove the path prefix.",
+ },
+ "value": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Origin-Pull url rewrite value, maximum length 1024, must start with /.note: when action is addprefix, it cannot end with /; when action is rmvprefix, * cannot be present.",
+ },
+ },
+ },
+ },
+ "quic_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "The quic configuration parameter. this parameter is required when name is quic.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable quic. values: on: enable; off: disable.",
+ },
+ },
+ },
+ },
+ "web_socket_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "The websocket configuration parameter. this parameter is required when name is websocket.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable websocket connection timeout. values: on: use timeout as the websocket timeout;; off: the platform still supports websocket connections, using the system default timeout of 15 seconds.",
+ },
+ "timeout": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Timeout, unit: seconds. maximum timeout is 120 seconds.",
+ },
+ },
+ },
+ },
+ "authentication_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Token authentication configuration parameter. this parameter is required when name is authentication.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "auth_type": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Authentication type. valid values:\n- `TypeA`: authentication method a type, for specific meaning please refer to authentication method a. https://www.tencentcloud.com/document/product/1145/62475;\n- `TypeB`: authentication method b type, for specific meaning please refer to authentication method b. https://www.tencentcloud.com/document/product/1145/62476;\n- `TypeC`: authentication method c type, for specific meaning please refer to authentication method c. https://www.tencentcloud.com/document/product/1145/62477;\n- `TypeD`: authentication method d type, for specific meaning please refer to authentication method d. https://www.tencentcloud.com/document/product/1145/62478;\n- `TypeVOD`: authentication method v type, for specific meaning please refer to authentication method v. https://www.tencentcloud.com/document/product/1145/62479.",
+ },
+ "secret_key": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "The primary authentication key consists of 6-40 uppercase and lowercase english letters or digits, and cannot contain \" and $.",
+ },
+ "timeout": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Validity period of the authentication url, in seconds, value range: 1-630720000. used to determine if the client access request has expired: If the current time exceeds \"timestamp + validity period\", it is an expired request, and a 403 is returned directly. If the current time does not exceed \"timestamp + validity period\", the request is not expired, and the md5 string is further validated. note: when authtype is one of typea, typeb, typec, or typed, this field is required.",
+ },
+ "backup_secret_key": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "The backup authentication key consists of 6-40 uppercase and lowercase english letters or digits, and cannot contain \" and $.",
+ },
+ "auth_param": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Authentication parameters name. the node will validate the value corresponding to this parameter name. consists of 1-100 uppercase and lowercase letters, numbers, or underscores.note: this field is required when authtype is either typea or typed.",
+ },
+ "time_param": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Authentication timestamp. it cannot be the same as the value of the authparam field.note: this field is required when authtype is typed.",
+ },
+ "time_format": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Authentication time format. values: dec: decimal; hex: hexadecimal.",
+ },
+ },
+ },
+ },
+ "max_age_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Browser cache ttl configuration parameter. this parameter is required when name is maxage.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "follow_origin": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Specifies whether to follow the origin server cache-control configuration, with the following values: on: follow the origin server and ignore the field cachetime; off: do not follow the origin server and apply the field cachetime.",
+ },
+ "cache_time": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Custom cache time value, unit: seconds. value range: 0-315360000. note: when followorigin is off, it means not following the origin server and using cachetime to set the cache time; otherwise, this field will not take effect.",
+ },
+ },
+ },
+ },
+ "status_code_cache_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Status code cache ttl configuration parameter. this parameter is required when name is statuscodecache.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "status_code_cache_params": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Status code cache ttl.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "status_code": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Status code. valid values: 400, 401, 403, 404, 405, 407, 414, 500, 501, 502, 503, 504, 509, 514.",
+ },
+ "cache_time": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Cache time value in seconds. value range: 0-31536000.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "offline_cache_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Offline cache configuration parameter. this parameter is required when name is offlinecache.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable offline caching. values: on: enable; Off: disable.",
+ },
+ },
+ },
+ },
+ "smart_routing_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Smart acceleration configuration parameter. this parameter is required when name is smartrouting.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable smart acceleration. values: on: enable; Off: disable.",
+ },
+ },
+ },
+ },
+ "range_origin_pull_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Shard source retrieval configuration parameter. this parameter is required when name is set to rangeoriginpull.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable range gets. values are: on: enable; Off: disable.",
+ },
+ },
+ },
+ },
+ "upstream_http2_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HTTP2 origin-pull configuration parameter. this parameter is required when name is set to upstreamhttp2.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable http2 origin-pull. valid values: on: enable; off: disable.",
+ },
+ },
+ },
+ },
+ "host_header_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Host header rewrite configuration parameter. this parameter is required when name is set to hostheader.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Action to be executed. values: followOrigin: follow origin server domain name; custom: custom.",
+ },
+ "server_name": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Host header rewrite requires a complete domain name. note: this field is required when switch is on; when switch is off, this field is not required and any value will be ignored.",
+ },
+ },
+ },
+ },
+ "force_redirect_https_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Force https redirect configuration parameter. this parameter is required when the name is set to forceredirecthttps.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable forced redirect configuration switch. values: on: enable; off: disable.",
+ },
+ "redirect_status_code": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Redirection status code. this field is required when switch is on; otherwise, it is not effective. valid values are: 301: 301 redirect; 302: 302 redirect.",
+ },
+ },
+ },
+ },
+ "compression_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Intelligent compression configuration. this parameter is required when name is set to compression.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable smart compression. values: on: enable; off: disable.",
+ },
+ "algorithms": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Supported compression algorithm list. this field is required when switch is on; otherwise, it is not effective. valid values: brotli: brotli algorithm; gzip: gzip algorithm.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ "hsts_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HSTS configuration parameter. this parameter is required when name is hsts.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable hsts. values: on: enable; off: disable.",
+ },
+ "timeout": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Cache hsts header time, unit: seconds. value range: 1-31536000. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.",
+ },
+ "include_sub_domains": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to allow other subdomains to inherit the same hsts header. values: on: allows other subdomains to inherit the same hsts header; off: does not allow other subdomains to inherit the same hsts header. note: when switch is on, this field is required; when switch is off, this field is not required and will not take effect if filled.",
+ },
+ "preload": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to allow the browser to preload the hsts header. valid values: on: allows the browser to preload the hsts header; off: does not allow the browser to preload the hsts header. note: when switch is on, this field is required; when switch is off, this field is not required and will not take effect if filled.",
+ },
+ },
+ },
+ },
+ "client_ip_header_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Client ip header configuration for storing client request ip information. this parameter is required when name is clientipheader.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable configuration. values: on: enable; off: disable.",
+ },
+ "header_name": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Name of the request header containing the client ip address for origin-pull. when switch is on, this parameter is required. x-forwarded-for is not allowed for this parameter.",
+ },
+ },
+ },
+ },
+ "ocsp_stapling_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "OCSP stapling configuration parameter. this parameter is required when the name is set to ocspstapling.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable ocsp stapling configuration switch. values: on: enable; off: disable.",
+ },
+ },
+ },
+ },
+ "http2_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HTTP2 access configuration parameter. this parameter is required when name is http2.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable http2 access. values: on: enable; off: disable.",
+ },
+ },
+ },
+ },
+ "post_max_size_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Maximum size configuration for file streaming upload via a post request. this parameter is required when name is postmaxsize.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable post request file upload limit, in bytes (default limit: 32 * 2^20 bytes). valid values: on: enable limit; off: disable limit.",
+ },
+ "max_size": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Maximum size of the file uploaded for streaming via a post request, in bytes. value range: 1 * 2^20 bytes to 500 * 2^20 bytes.",
+ },
+ },
+ },
+ },
+ "client_ip_country_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration parameter for carrying the region information of the client ip during origin-pull. this parameter is required when the name is set to clientipcountry.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable configuration. values: on: enable; off: disable.",
+ },
+ "header_name": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Name of the request header that contains the client ip region. it is valid when switch=on. the default value eo-client-ipcountry is used when it is not specified.",
+ },
+ },
+ },
+ },
+ "upstream_follow_redirect_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration parameter for following redirects during origin-pull. this parameter is required when the name is set to upstreamfollowredirect.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable origin-pull to follow the redirection configuration. values: on: enable; off: disable.",
+ },
+ "max_times": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "The maximum number of redirects. value range: 1-5. Note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.",
+ },
+ },
+ },
+ },
+ "upstream_request_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration parameter for origin-pull request. this parameter is required when the name is set to upstreamrequest.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "query_string": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Query string configuration. optional. if not provided, it will not be configured.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable origin-pull request parameter query string. values: on: enable; off: disable.",
+ },
+ "action": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Query string mode. this parameter is required when switch is on. values: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters.",
+ },
+ "values": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Specifies parameter values. this parameter takes effect only when the query string mode action is includecustom or excludecustom, and is used to specify the parameters to be reserved or ignored. up to 10 parameters are supported.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ "cookie": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Cookie configuration. optional. if not provided, it will not be configured.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "switch": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Whether to enable the origin-pull request parameter cookie. valid values: on: enable; off: disable.",
+ },
+ "action": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Origin-Pull request parameter cookie mode. this parameter is required when switch is on. valid values are: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters.",
+ },
+ "values": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Specifies parameter values. this parameter takes effect only when the query string mode action is includecustom or excludecustom, and is used to specify the parameters to be reserved or ignored. up to 10 parameters are supported.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "tls_config_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "SSL/TLS security configuration parameter. this parameter is required when the name is set to tlsconfig.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "version": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "TLS version. at least one must be specified. if multiple versions are specified, they must be consecutive, e.g., enable tls1, 1.1, 1.2, and 1.3. it is not allowed to enable only 1 and 1.2 while disabling 1.1. valid values: tlsv1: tlsv1 version; `tlsv1.1`: tlsv1.1 version; `tlsv1.2`: tlsv1.2 version; `tlsv1.3`: tlsv1.3 version.",
+ },
+ "cipher_suite": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Cipher suite. for detailed information, please refer to tls versions and cipher suites description, https://www.tencentcloud.com/document/product/1145/54154?has_map=1. valid values: loose-v2023: loose-v2023 cipher suite; general-v2023: general-v2023 cipher suite; strict-v2023: strict-v2023 cipher suite.",
+ },
+ },
+ },
+ },
+ "modify_origin_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration parameter for modifying the origin server. this parameter is required when the name is set to modifyorigin.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "origin_type": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "The origin type. values: IPDomain: ipv4, ipv6, or domain name type origin server; OriginGroup: origin server group type origin server; LoadBalance: cloud load balancer (clb), this feature is in beta test. to use it, please submit a ticket or contact smart customer service; COS: tencent cloud COS origin server; AWSS3: all object storage origin servers that support the aws s3 protocol.",
+ },
+ "origin": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Origin server address, which varies according to the value of origintype: When origintype = ipdomain, fill in an ipv4 address, an ipv6 address, or a domain name; When origintype = cos, please fill in the access domain name of the cos bucket; When origintype = awss3, fill in the access domain name of the s3 bucket; When origintype = origingroup, fill in the origin server group id; When origintype = loadbalance, fill in the cloud load balancer instance id. this feature is currently only available to the allowlist.",
+ },
+ "origin_protocol": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Origin-Pull protocol configuration. this parameter is required when origintype is ipdomain, origingroup, or loadbalance. valid values are: Http: use http protocol; Https: use https protocol; Follow: follow the protocol.",
+ },
+ "http_origin_port": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Ports for http origin-pull requests. value range: 1-65535. this parameter takes effect only when the origin-pull protocol originprotocol is http or follow.",
+ },
+ "https_origin_port": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Ports for https origin-pull requests. value range: 1-65535. this parameter takes effect only when the origin-pull protocol originprotocol is https or follow.",
+ },
+ "private_access": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Whether access to the private object storage origin server is allowed. this parameter is valid only when the origin server type origintype is COS or awss3. valid values: on: enable private authentication; off: disable private authentication. if not specified, the default value is off.",
+ },
+ "private_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Private authentication parameter. this parameter is valid only when origintype = awss3 and privateaccess = on.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "access_key_id": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Authentication parameter access key id.",
+ },
+ "secret_access_key": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Authentication parameter secret access key.",
+ },
+ "signature_version": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Authentication version. values: v2: v2 version; v4: v4 version.",
+ },
+ "region": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Region of the bucket.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "http_upstream_timeout_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Configuration of layer 7 origin timeout. this parameter is required when name is httpupstreamtimeout.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "response_timeout": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "HTTP response timeout in seconds. value range: 5-600.",
+ },
+ },
+ },
+ },
+ "http_response_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HTTP response configuration parameters. this parameter is required when name is httpresponse.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "status_code": {
+ Type: schema.TypeInt,
+ Optional: true,
+ Description: "Response status code. supports 2xx, 4xx, 5xx, excluding 499, 514, 101, 301, 302, 303, 509, 520-599.",
+ },
+ "response_page": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Response page id.",
+ },
+ },
+ },
+ },
+ "error_page_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Custom error page configuration parameters. this parameter is required when name is errorpage.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "error_page_params": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Custom error page configuration list.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "status_code": {
+ Type: schema.TypeInt,
+ Required: true,
+ Description: "Status code. supported values are 400, 403, 404, 405, 414, 416, 451, 500, 501, 502, 503, 504.",
+ },
+ "redirect_url": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Redirect url. requires a full redirect path, such as https://www.test.com/error.html.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "modify_response_header_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Modify http node response header configuration parameters. this parameter is required when name is modifyresponseheader.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "header_actions": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "HTTP origin-pull header rules list.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "HTTP header setting methods. valid values are: set: sets a value for an existing header parameter; del: deletes a header parameter; add: adds a header parameter.",
+ },
+ "name": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "HTTP header name.",
+ },
+ "value": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "HTTP header value. this parameter is required when the action is set to set or add; it is optional when the action is set to del.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "modify_request_header_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Modify http node request header configuration parameters. this parameter is required when name is modifyrequestheader.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "header_actions": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "List of http header setting rules.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "action": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "HTTP header setting methods. valid values are: set: sets a value for an existing header parameter; del: deletes a header parameter; add: adds a header parameter.",
+ },
+ "name": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "HTTP header name.",
+ },
+ "value": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "HTTP header value. this parameter is required when the action is set to set or add; it is optional when the action is set to del.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ "response_speed_limit_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Single connection download speed limit configuration parameter. this parameter is required when name is responsespeedlimit.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "mode": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Download rate limit mode. valid values: LimitUponDownload: rate limit throughout the download process; LimitAfterSpecificBytesDownloaded: rate limit after downloading specific bytes at full speed; LimitAfterSpecificSecondsDownloaded: start speed limit after downloading at full speed for a specific duration.",
+ },
+ "max_speed": {
+ Type: schema.TypeString,
+ Required: true,
+ Description: "Rate-Limiting value, in kb/s. enter a numerical value to specify the rate limit.",
+ },
+ "start_at": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Rate-Limiting start value, which can be the download size or specified duration, in kb or s. this parameter is required when mode is set to limitafterspecificbytesdownloaded or limitafterspecificsecondsdownloaded. enter a numerical value to specify the download size or duration.",
+ },
+ },
+ },
+ },
+ "set_content_identifier_parameters": {
+ Type: schema.TypeList,
+ Optional: true,
+ MaxItems: 1,
+ Description: "Content identification configuration parameter. this parameter is required when name is httpresponse.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "content_identifier": {
+ Type: schema.TypeString,
+ Optional: true,
+ Description: "Content identifier id.",
+ },
+ },
+ },
+ },
+ },
+ },
+ },
+ }
+
+ if depth < 8 {
+ schemaMap["sub_rules"] = &schema.Schema{
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "List of sub-rules. multiple rules exist in this list and are executed sequentially from top to bottom. note: subrules and actions cannot both be empty. currently, only one layer of subrules is supported.",
+ Elem: &schema.Resource{
+ Schema: map[string]*schema.Schema{
+ "branches": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Sub-rule branch.",
+ Elem: &schema.Resource{
+ Schema: TencentTeoL7RuleBranchBasicInfo(depth + 1),
+ },
+ },
+ "description": {
+ Type: schema.TypeList,
+ Optional: true,
+ Description: "Rule comments.",
+ Elem: &schema.Schema{
+ Type: schema.TypeString,
+ },
+ },
+ },
+ },
+ }
+ }
+
+ return schemaMap
+}
+
+func resourceTencentCloudTeoL7AccRuleGetBranchs(rulesMap map[string]interface{}) []*teo.RuleBranch {
+ ruleBranchs := []*teo.RuleBranch{}
+ if v, ok := rulesMap["branches"]; ok {
+ for _, item := range v.([]interface{}) {
+ branchesMap := item.(map[string]interface{})
+ ruleBranch := teov20220901.RuleBranch{}
+ if v, ok := branchesMap["condition"].(string); ok && v != "" {
+ ruleBranch.Condition = helper.String(v)
+ }
+ if v, ok := branchesMap["actions"]; ok {
+ for _, item := range v.([]interface{}) {
+ actionsMap := item.(map[string]interface{})
+ ruleEngineAction := teov20220901.RuleEngineAction{}
+ if v, ok := actionsMap["name"].(string); ok && v != "" {
+ ruleEngineAction.Name = helper.String(v)
+ }
+ if cacheParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["cache_parameters"]); ok {
+ cacheParameters := teov20220901.CacheParameters{}
+ if followOriginMap, ok := helper.ConvertInterfacesHeadToMap(cacheParametersMap["follow_origin"]); ok {
+ followOrigin := teov20220901.FollowOrigin{}
+ if v, ok := followOriginMap["switch"].(string); ok && v != "" {
+ followOrigin.Switch = helper.String(v)
+ }
+ if v, ok := followOriginMap["default_cache"].(string); ok && v != "" {
+ followOrigin.DefaultCache = helper.String(v)
+ }
+ if v, ok := followOriginMap["default_cache_strategy"].(string); ok && v != "" {
+ followOrigin.DefaultCacheStrategy = helper.String(v)
+ }
+ if v, ok := followOriginMap["default_cache_time"].(int); ok {
+ followOrigin.DefaultCacheTime = helper.IntInt64(v)
+ }
+ cacheParameters.FollowOrigin = &followOrigin
+ }
+ if noCacheMap, ok := helper.ConvertInterfacesHeadToMap(cacheParametersMap["no_cache"]); ok {
+ noCache := teov20220901.NoCache{}
+ if v, ok := noCacheMap["switch"].(string); ok && v != "" {
+ noCache.Switch = helper.String(v)
+ }
+ cacheParameters.NoCache = &noCache
+ }
+ if customTimeMap, ok := helper.ConvertInterfacesHeadToMap(cacheParametersMap["custom_time"]); ok {
+ customTime := teov20220901.CustomTime{}
+ if v, ok := customTimeMap["switch"].(string); ok && v != "" {
+ customTime.Switch = helper.String(v)
+ }
+ if v, ok := customTimeMap["ignore_cache_control"].(string); ok && v != "" {
+ customTime.IgnoreCacheControl = helper.String(v)
+ }
+ if v, ok := customTimeMap["cache_time"].(int); ok {
+ customTime.CacheTime = helper.IntInt64(v)
+ }
+ cacheParameters.CustomTime = &customTime
+ }
+ ruleEngineAction.CacheParameters = &cacheParameters
+ }
+ if cacheKeyParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["cache_key_parameters"]); ok {
+ cacheKeyParameters := teov20220901.CacheKeyParameters{}
+ if v, ok := cacheKeyParametersMap["full_url_cache"].(string); ok && v != "" {
+ cacheKeyParameters.FullURLCache = helper.String(v)
+ }
+ if queryStringMap, ok := helper.ConvertInterfacesHeadToMap(cacheKeyParametersMap["query_string"]); ok {
+ cacheKeyQueryString := teov20220901.CacheKeyQueryString{}
+ if v, ok := queryStringMap["switch"].(string); ok && v != "" {
+ cacheKeyQueryString.Switch = helper.String(v)
+ }
+ if v, ok := queryStringMap["action"].(string); ok && v != "" {
+ cacheKeyQueryString.Action = helper.String(v)
+ }
+ if v, ok := queryStringMap["values"]; ok {
+ valuesSet := v.([]interface{})
+ for i := range valuesSet {
+ values := valuesSet[i].(string)
+ cacheKeyQueryString.Values = append(cacheKeyQueryString.Values, helper.String(values))
+ }
+ }
+ cacheKeyParameters.QueryString = &cacheKeyQueryString
+ }
+ if v, ok := cacheKeyParametersMap["ignore_case"].(string); ok && v != "" {
+ cacheKeyParameters.IgnoreCase = helper.String(v)
+ }
+ if headerMap, ok := helper.ConvertInterfacesHeadToMap(cacheKeyParametersMap["header"]); ok {
+ cacheKeyHeader := teov20220901.CacheKeyHeader{}
+ if v, ok := headerMap["switch"].(string); ok && v != "" {
+ cacheKeyHeader.Switch = helper.String(v)
+ }
+ if v, ok := headerMap["values"]; ok {
+ valuesSet := v.([]interface{})
+ for i := range valuesSet {
+ values := valuesSet[i].(string)
+ cacheKeyHeader.Values = append(cacheKeyHeader.Values, helper.String(values))
+ }
+ }
+ cacheKeyParameters.Header = &cacheKeyHeader
+ }
+ if v, ok := cacheKeyParametersMap["scheme"].(string); ok && v != "" {
+ cacheKeyParameters.Scheme = helper.String(v)
+ }
+ if cookieMap, ok := helper.ConvertInterfacesHeadToMap(cacheKeyParametersMap["cookie"]); ok {
+ cacheKeyCookie := teov20220901.CacheKeyCookie{}
+ if v, ok := cookieMap["switch"].(string); ok && v != "" {
+ cacheKeyCookie.Switch = helper.String(v)
+ }
+ if v, ok := cookieMap["action"].(string); ok && v != "" {
+ cacheKeyCookie.Action = helper.String(v)
+ }
+ if v, ok := cookieMap["values"]; ok {
+ valuesSet := v.([]interface{})
+ for i := range valuesSet {
+ values := valuesSet[i].(string)
+ cacheKeyCookie.Values = append(cacheKeyCookie.Values, helper.String(values))
+ }
+ }
+ cacheKeyParameters.Cookie = &cacheKeyCookie
+ }
+ ruleEngineAction.CacheKeyParameters = &cacheKeyParameters
+ }
+ if cachePrefreshParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["cache_prefresh_parameters"]); ok {
+ cachePrefreshParameters := teov20220901.CachePrefreshParameters{}
+ if v, ok := cachePrefreshParametersMap["switch"].(string); ok && v != "" {
+ cachePrefreshParameters.Switch = helper.String(v)
+ }
+ if v, ok := cachePrefreshParametersMap["cache_time_percent"].(int); ok {
+ cachePrefreshParameters.CacheTimePercent = helper.IntInt64(v)
+ }
+ ruleEngineAction.CachePrefreshParameters = &cachePrefreshParameters
+ }
+ if accessURLRedirectParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["access_url_redirect_parameters"]); ok {
+ accessURLRedirectParameters := teov20220901.AccessURLRedirectParameters{}
+ if v, ok := accessURLRedirectParametersMap["status_code"].(int); ok {
+ accessURLRedirectParameters.StatusCode = helper.IntInt64(v)
+ }
+ if v, ok := accessURLRedirectParametersMap["protocol"].(string); ok && v != "" {
+ accessURLRedirectParameters.Protocol = helper.String(v)
+ }
+ if hostNameMap, ok := helper.ConvertInterfacesHeadToMap(accessURLRedirectParametersMap["host_name"]); ok {
+ hostName := teov20220901.HostName{}
+ if v, ok := hostNameMap["action"].(string); ok && v != "" {
+ hostName.Action = helper.String(v)
+ }
+ if v, ok := hostNameMap["value"].(string); ok && v != "" {
+ hostName.Value = helper.String(v)
+ }
+ accessURLRedirectParameters.HostName = &hostName
+ }
+ if uRLPathMap, ok := helper.ConvertInterfacesHeadToMap(accessURLRedirectParametersMap["url_path"]); ok {
+ uRLPath := teov20220901.URLPath{}
+ if v, ok := uRLPathMap["action"].(string); ok && v != "" {
+ uRLPath.Action = helper.String(v)
+ }
+ if v, ok := uRLPathMap["regex"].(string); ok && v != "" {
+ uRLPath.Regex = helper.String(v)
+ }
+ if v, ok := uRLPathMap["value"].(string); ok && v != "" {
+ uRLPath.Value = helper.String(v)
+ }
+ accessURLRedirectParameters.URLPath = &uRLPath
+ }
+ if queryStringMap, ok := helper.ConvertInterfacesHeadToMap(accessURLRedirectParametersMap["query_string"]); ok {
+ accessURLRedirectQueryString := teov20220901.AccessURLRedirectQueryString{}
+ if v, ok := queryStringMap["action"].(string); ok && v != "" {
+ accessURLRedirectQueryString.Action = helper.String(v)
+ }
+ accessURLRedirectParameters.QueryString = &accessURLRedirectQueryString
+ }
+ ruleEngineAction.AccessURLRedirectParameters = &accessURLRedirectParameters
+ }
+ if upstreamURLRewriteParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["upstream_url_rewrite_parameters"]); ok {
+ upstreamURLRewriteParameters := teov20220901.UpstreamURLRewriteParameters{}
+ if v, ok := upstreamURLRewriteParametersMap["type"].(string); ok && v != "" {
+ upstreamURLRewriteParameters.Type = helper.String(v)
+ }
+ if v, ok := upstreamURLRewriteParametersMap["action"].(string); ok && v != "" {
+ upstreamURLRewriteParameters.Action = helper.String(v)
+ }
+ if v, ok := upstreamURLRewriteParametersMap["value"].(string); ok && v != "" {
+ upstreamURLRewriteParameters.Value = helper.String(v)
+ }
+ ruleEngineAction.UpstreamURLRewriteParameters = &upstreamURLRewriteParameters
+ }
+ if qUICParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["quic_parameters"]); ok {
+ qUICParameters := teov20220901.QUICParameters{}
+ if v, ok := qUICParametersMap["switch"].(string); ok && v != "" {
+ qUICParameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.QUICParameters = &qUICParameters
+ }
+ if webSocketParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["web_socket_parameters"]); ok {
+ webSocketParameters := teov20220901.WebSocketParameters{}
+ if v, ok := webSocketParametersMap["switch"].(string); ok && v != "" {
+ webSocketParameters.Switch = helper.String(v)
+ }
+ if v, ok := webSocketParametersMap["timeout"].(int); ok {
+ webSocketParameters.Timeout = helper.IntInt64(v)
+ }
+ ruleEngineAction.WebSocketParameters = &webSocketParameters
+ }
+ if authenticationParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["authentication_parameters"]); ok {
+ authenticationParameters := teov20220901.AuthenticationParameters{}
+ if v, ok := authenticationParametersMap["auth_type"].(string); ok && v != "" {
+ authenticationParameters.AuthType = helper.String(v)
+ }
+ if v, ok := authenticationParametersMap["secret_key"].(string); ok && v != "" {
+ authenticationParameters.SecretKey = helper.String(v)
+ }
+ if v, ok := authenticationParametersMap["timeout"].(int); ok {
+ authenticationParameters.Timeout = helper.IntInt64(v)
+ }
+ if v, ok := authenticationParametersMap["backup_secret_key"].(string); ok && v != "" {
+ authenticationParameters.BackupSecretKey = helper.String(v)
+ }
+ if v, ok := authenticationParametersMap["auth_param"].(string); ok && v != "" {
+ authenticationParameters.AuthParam = helper.String(v)
+ }
+ if v, ok := authenticationParametersMap["time_param"].(string); ok && v != "" {
+ authenticationParameters.TimeParam = helper.String(v)
+ }
+ if v, ok := authenticationParametersMap["time_format"].(string); ok && v != "" {
+ authenticationParameters.TimeFormat = helper.String(v)
+ }
+ ruleEngineAction.AuthenticationParameters = &authenticationParameters
+ }
+ if maxAgeParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["max_age_parameters"]); ok {
+ maxAgeParameters := teov20220901.MaxAgeParameters{}
+ if v, ok := maxAgeParametersMap["follow_origin"].(string); ok && v != "" {
+ maxAgeParameters.FollowOrigin = helper.String(v)
+ }
+ if v, ok := maxAgeParametersMap["cache_time"].(int); ok {
+ maxAgeParameters.CacheTime = helper.IntInt64(v)
+ }
+ ruleEngineAction.MaxAgeParameters = &maxAgeParameters
+ }
+ if statusCodeCacheParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["status_code_cache_parameters"]); ok {
+ statusCodeCacheParameters := teov20220901.StatusCodeCacheParameters{}
+ if v, ok := statusCodeCacheParametersMap["status_code_cache_params"]; ok {
+ for _, item := range v.([]interface{}) {
+ statusCodeCacheParamsMap := item.(map[string]interface{})
+ statusCodeCacheParam := teov20220901.StatusCodeCacheParam{}
+ if v, ok := statusCodeCacheParamsMap["status_code"].(int); ok {
+ statusCodeCacheParam.StatusCode = helper.IntInt64(v)
+ }
+ if v, ok := statusCodeCacheParamsMap["cache_time"].(int); ok {
+ statusCodeCacheParam.CacheTime = helper.IntInt64(v)
+ }
+ statusCodeCacheParameters.StatusCodeCacheParams = append(statusCodeCacheParameters.StatusCodeCacheParams, &statusCodeCacheParam)
+ }
+ }
+ ruleEngineAction.StatusCodeCacheParameters = &statusCodeCacheParameters
+ }
+ if offlineCacheParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["offline_cache_parameters"]); ok {
+ offlineCacheParameters := teov20220901.OfflineCacheParameters{}
+ if v, ok := offlineCacheParametersMap["switch"].(string); ok && v != "" {
+ offlineCacheParameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.OfflineCacheParameters = &offlineCacheParameters
+ }
+ if smartRoutingParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["smart_routing_parameters"]); ok {
+ smartRoutingParameters := teov20220901.SmartRoutingParameters{}
+ if v, ok := smartRoutingParametersMap["switch"].(string); ok && v != "" {
+ smartRoutingParameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.SmartRoutingParameters = &smartRoutingParameters
+ }
+ if rangeOriginPullParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["range_origin_pull_parameters"]); ok {
+ rangeOriginPullParameters := teov20220901.RangeOriginPullParameters{}
+ if v, ok := rangeOriginPullParametersMap["switch"].(string); ok && v != "" {
+ rangeOriginPullParameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.RangeOriginPullParameters = &rangeOriginPullParameters
+ }
+ if upstreamHTTP2ParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["upstream_http2_parameters"]); ok {
+ upstreamHTTP2Parameters := teov20220901.UpstreamHTTP2Parameters{}
+ if v, ok := upstreamHTTP2ParametersMap["switch"].(string); ok && v != "" {
+ upstreamHTTP2Parameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.UpstreamHTTP2Parameters = &upstreamHTTP2Parameters
+ }
+ if hostHeaderParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["host_header_parameters"]); ok {
+ hostHeaderParameters := teov20220901.HostHeaderParameters{}
+ if v, ok := hostHeaderParametersMap["action"].(string); ok && v != "" {
+ hostHeaderParameters.Action = helper.String(v)
+ }
+ if v, ok := hostHeaderParametersMap["server_name"].(string); ok && v != "" {
+ hostHeaderParameters.ServerName = helper.String(v)
+ }
+ ruleEngineAction.HostHeaderParameters = &hostHeaderParameters
+ }
+ if forceRedirectHTTPSParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["force_redirect_https_parameters"]); ok {
+ forceRedirectHTTPSParameters := teov20220901.ForceRedirectHTTPSParameters{}
+ if v, ok := forceRedirectHTTPSParametersMap["switch"].(string); ok && v != "" {
+ forceRedirectHTTPSParameters.Switch = helper.String(v)
+ }
+ if v, ok := forceRedirectHTTPSParametersMap["redirect_status_code"].(int); ok {
+ forceRedirectHTTPSParameters.RedirectStatusCode = helper.IntInt64(v)
+ }
+ ruleEngineAction.ForceRedirectHTTPSParameters = &forceRedirectHTTPSParameters
+ }
+ if compressionParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["compression_parameters"]); ok {
+ compressionParameters := teov20220901.CompressionParameters{}
+ if v, ok := compressionParametersMap["switch"].(string); ok && v != "" {
+ compressionParameters.Switch = helper.String(v)
+ }
+ if v, ok := compressionParametersMap["algorithms"]; ok {
+ algorithmsSet := v.([]interface{})
+ for i := range algorithmsSet {
+ algorithms := algorithmsSet[i].(string)
+ compressionParameters.Algorithms = append(compressionParameters.Algorithms, helper.String(algorithms))
+ }
+ }
+ ruleEngineAction.CompressionParameters = &compressionParameters
+ }
+ if hSTSParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["hsts_parameters"]); ok {
+ hSTSParameters := teov20220901.HSTSParameters{}
+ if v, ok := hSTSParametersMap["switch"].(string); ok && v != "" {
+ hSTSParameters.Switch = helper.String(v)
+ }
+ if v, ok := hSTSParametersMap["timeout"].(int); ok {
+ hSTSParameters.Timeout = helper.IntInt64(v)
+ }
+ if v, ok := hSTSParametersMap["include_sub_domains"].(string); ok && v != "" {
+ hSTSParameters.IncludeSubDomains = helper.String(v)
+ }
+ if v, ok := hSTSParametersMap["preload"].(string); ok && v != "" {
+ hSTSParameters.Preload = helper.String(v)
+ }
+ ruleEngineAction.HSTSParameters = &hSTSParameters
+ }
+ if clientIPHeaderParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["client_ip_header_parameters"]); ok {
+ clientIPHeaderParameters := teov20220901.ClientIPHeaderParameters{}
+ if v, ok := clientIPHeaderParametersMap["switch"].(string); ok && v != "" {
+ clientIPHeaderParameters.Switch = helper.String(v)
+ }
+ if v, ok := clientIPHeaderParametersMap["header_name"].(string); ok && v != "" {
+ clientIPHeaderParameters.HeaderName = helper.String(v)
+ }
+ ruleEngineAction.ClientIPHeaderParameters = &clientIPHeaderParameters
+ }
+ if oCSPStaplingParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["ocsp_stapling_parameters"]); ok {
+ oCSPStaplingParameters := teov20220901.OCSPStaplingParameters{}
+ if v, ok := oCSPStaplingParametersMap["switch"].(string); ok && v != "" {
+ oCSPStaplingParameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.OCSPStaplingParameters = &oCSPStaplingParameters
+ }
+ if hTTP2ParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["http2_parameters"]); ok {
+ hTTP2Parameters := teov20220901.HTTP2Parameters{}
+ if v, ok := hTTP2ParametersMap["switch"].(string); ok && v != "" {
+ hTTP2Parameters.Switch = helper.String(v)
+ }
+ ruleEngineAction.HTTP2Parameters = &hTTP2Parameters
+ }
+ if postMaxSizeParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["post_max_size_parameters"]); ok {
+ postMaxSizeParameters := teov20220901.PostMaxSizeParameters{}
+ if v, ok := postMaxSizeParametersMap["switch"].(string); ok && v != "" {
+ postMaxSizeParameters.Switch = helper.String(v)
+ }
+ if v, ok := postMaxSizeParametersMap["max_size"].(int); ok {
+ postMaxSizeParameters.MaxSize = helper.IntInt64(v)
+ }
+ ruleEngineAction.PostMaxSizeParameters = &postMaxSizeParameters
+ }
+ if clientIPCountryParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["client_ip_country_parameters"]); ok {
+ clientIPCountryParameters := teov20220901.ClientIPCountryParameters{}
+ if v, ok := clientIPCountryParametersMap["switch"].(string); ok && v != "" {
+ clientIPCountryParameters.Switch = helper.String(v)
+ }
+ if v, ok := clientIPCountryParametersMap["header_name"].(string); ok && v != "" {
+ clientIPCountryParameters.HeaderName = helper.String(v)
+ }
+ ruleEngineAction.ClientIPCountryParameters = &clientIPCountryParameters
+ }
+ if upstreamFollowRedirectParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["upstream_follow_redirect_parameters"]); ok {
+ upstreamFollowRedirectParameters := teov20220901.UpstreamFollowRedirectParameters{}
+ if v, ok := upstreamFollowRedirectParametersMap["switch"].(string); ok && v != "" {
+ upstreamFollowRedirectParameters.Switch = helper.String(v)
+ }
+ if v, ok := upstreamFollowRedirectParametersMap["max_times"].(int); ok {
+ upstreamFollowRedirectParameters.MaxTimes = helper.IntInt64(v)
+ }
+ ruleEngineAction.UpstreamFollowRedirectParameters = &upstreamFollowRedirectParameters
+ }
+ if upstreamRequestParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["upstream_request_parameters"]); ok {
+ upstreamRequestParameters := teov20220901.UpstreamRequestParameters{}
+ if queryStringMap, ok := helper.ConvertInterfacesHeadToMap(upstreamRequestParametersMap["query_string"]); ok {
+ upstreamRequestQueryString := teov20220901.UpstreamRequestQueryString{}
+ if v, ok := queryStringMap["switch"].(string); ok && v != "" {
+ upstreamRequestQueryString.Switch = helper.String(v)
+ }
+ if v, ok := queryStringMap["action"].(string); ok && v != "" {
+ upstreamRequestQueryString.Action = helper.String(v)
+ }
+ if v, ok := queryStringMap["values"]; ok {
+ valuesSet := v.([]interface{})
+ for i := range valuesSet {
+ values := valuesSet[i].(string)
+ upstreamRequestQueryString.Values = append(upstreamRequestQueryString.Values, helper.String(values))
+ }
+ }
+ upstreamRequestParameters.QueryString = &upstreamRequestQueryString
+ }
+ if cookieMap, ok := helper.ConvertInterfacesHeadToMap(upstreamRequestParametersMap["cookie"]); ok {
+ upstreamRequestCookie := teov20220901.UpstreamRequestCookie{}
+ if v, ok := cookieMap["switch"].(string); ok && v != "" {
+ upstreamRequestCookie.Switch = helper.String(v)
+ }
+ if v, ok := cookieMap["action"].(string); ok && v != "" {
+ upstreamRequestCookie.Action = helper.String(v)
+ }
+ if v, ok := cookieMap["values"]; ok {
+ valuesSet := v.([]interface{})
+ for i := range valuesSet {
+ values := valuesSet[i].(string)
+ upstreamRequestCookie.Values = append(upstreamRequestCookie.Values, helper.String(values))
+ }
+ }
+ upstreamRequestParameters.Cookie = &upstreamRequestCookie
+ }
+ ruleEngineAction.UpstreamRequestParameters = &upstreamRequestParameters
+ }
+ if tLSConfigParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["tls_config_parameters"]); ok {
+ tLSConfigParameters := teov20220901.TLSConfigParameters{}
+ if v, ok := tLSConfigParametersMap["version"]; ok {
+ versionSet := v.([]interface{})
+ for i := range versionSet {
+ version := versionSet[i].(string)
+ tLSConfigParameters.Version = append(tLSConfigParameters.Version, helper.String(version))
+ }
+ }
+ if v, ok := tLSConfigParametersMap["cipher_suite"].(string); ok && v != "" {
+ tLSConfigParameters.CipherSuite = helper.String(v)
+ }
+ ruleEngineAction.TLSConfigParameters = &tLSConfigParameters
+ }
+ if modifyOriginParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["modify_origin_parameters"]); ok {
+ modifyOriginParameters := teov20220901.ModifyOriginParameters{}
+ if v, ok := modifyOriginParametersMap["origin_type"].(string); ok && v != "" {
+ modifyOriginParameters.OriginType = helper.String(v)
+ }
+ if v, ok := modifyOriginParametersMap["origin"].(string); ok && v != "" {
+ modifyOriginParameters.Origin = helper.String(v)
+ }
+ if v, ok := modifyOriginParametersMap["origin_protocol"].(string); ok && v != "" {
+ modifyOriginParameters.OriginProtocol = helper.String(v)
+ }
+ if v, ok := modifyOriginParametersMap["http_origin_port"].(int); ok {
+ modifyOriginParameters.HTTPOriginPort = helper.IntInt64(v)
+ }
+ if v, ok := modifyOriginParametersMap["https_origin_port"].(int); ok {
+ modifyOriginParameters.HTTPSOriginPort = helper.IntInt64(v)
+ }
+ if v, ok := modifyOriginParametersMap["private_access"].(string); ok && v != "" {
+ modifyOriginParameters.PrivateAccess = helper.String(v)
+ }
+ if privateParametersMap, ok := helper.ConvertInterfacesHeadToMap(modifyOriginParametersMap["private_parameters"]); ok {
+ originPrivateParameters := teov20220901.OriginPrivateParameters{}
+ if v, ok := privateParametersMap["access_key_id"].(string); ok && v != "" {
+ originPrivateParameters.AccessKeyId = helper.String(v)
+ }
+ if v, ok := privateParametersMap["secret_access_key"].(string); ok && v != "" {
+ originPrivateParameters.SecretAccessKey = helper.String(v)
+ }
+ if v, ok := privateParametersMap["signature_version"].(string); ok && v != "" {
+ originPrivateParameters.SignatureVersion = helper.String(v)
+ }
+ if v, ok := privateParametersMap["region"].(string); ok && v != "" {
+ originPrivateParameters.Region = helper.String(v)
+ }
+ modifyOriginParameters.PrivateParameters = &originPrivateParameters
+ }
+ ruleEngineAction.ModifyOriginParameters = &modifyOriginParameters
+ }
+ if hTTPUpstreamTimeoutParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["http_upstream_timeout_parameters"]); ok {
+ hTTPUpstreamTimeoutParameters := teov20220901.HTTPUpstreamTimeoutParameters{}
+ if v, ok := hTTPUpstreamTimeoutParametersMap["response_timeout"].(int); ok {
+ hTTPUpstreamTimeoutParameters.ResponseTimeout = helper.IntInt64(v)
+ }
+ ruleEngineAction.HTTPUpstreamTimeoutParameters = &hTTPUpstreamTimeoutParameters
+ }
+ if httpResponseParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["http_response_parameters"]); ok {
+ hTTPResponseParameters := teov20220901.HTTPResponseParameters{}
+ if v, ok := httpResponseParametersMap["status_code"].(int); ok {
+ hTTPResponseParameters.StatusCode = helper.IntInt64(v)
+ }
+ if v, ok := httpResponseParametersMap["response_page"].(string); ok && v != "" {
+ hTTPResponseParameters.ResponsePage = helper.String(v)
+ }
+ ruleEngineAction.HttpResponseParameters = &hTTPResponseParameters
+ }
+ if errorPageParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["error_page_parameters"]); ok {
+ errorPageParameters := teov20220901.ErrorPageParameters{}
+ if v, ok := errorPageParametersMap["error_page_params"]; ok {
+ for _, item := range v.([]interface{}) {
+ errorPageParamsMap := item.(map[string]interface{})
+ errorPage := teov20220901.ErrorPage{}
+ if v, ok := errorPageParamsMap["status_code"].(int); ok {
+ errorPage.StatusCode = helper.IntInt64(v)
+ }
+ if v, ok := errorPageParamsMap["redirect_url"].(string); ok && v != "" {
+ errorPage.RedirectURL = helper.String(v)
+ }
+ errorPageParameters.ErrorPageParams = append(errorPageParameters.ErrorPageParams, &errorPage)
+ }
+ }
+ ruleEngineAction.ErrorPageParameters = &errorPageParameters
+ }
+ if modifyResponseHeaderParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["modify_response_header_parameters"]); ok {
+ modifyResponseHeaderParameters := teov20220901.ModifyResponseHeaderParameters{}
+ if v, ok := modifyResponseHeaderParametersMap["header_actions"]; ok {
+ for _, item := range v.([]interface{}) {
+ headerActionsMap := item.(map[string]interface{})
+ headerAction := teov20220901.HeaderAction{}
+ if v, ok := headerActionsMap["action"].(string); ok && v != "" {
+ headerAction.Action = helper.String(v)
+ }
+ if v, ok := headerActionsMap["name"].(string); ok && v != "" {
+ headerAction.Name = helper.String(v)
+ }
+ if v, ok := headerActionsMap["value"].(string); ok && v != "" {
+ headerAction.Value = helper.String(v)
+ }
+ modifyResponseHeaderParameters.HeaderActions = append(modifyResponseHeaderParameters.HeaderActions, &headerAction)
+ }
+ }
+ ruleEngineAction.ModifyResponseHeaderParameters = &modifyResponseHeaderParameters
+ }
+ if modifyRequestHeaderParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["modify_request_header_parameters"]); ok {
+ modifyRequestHeaderParameters := teov20220901.ModifyRequestHeaderParameters{}
+ if v, ok := modifyRequestHeaderParametersMap["header_actions"]; ok {
+ for _, item := range v.([]interface{}) {
+ headerActionsMap := item.(map[string]interface{})
+ headerAction := teov20220901.HeaderAction{}
+ if v, ok := headerActionsMap["action"].(string); ok && v != "" {
+ headerAction.Action = helper.String(v)
+ }
+ if v, ok := headerActionsMap["name"].(string); ok && v != "" {
+ headerAction.Name = helper.String(v)
+ }
+ if v, ok := headerActionsMap["value"].(string); ok && v != "" {
+ headerAction.Value = helper.String(v)
+ }
+ modifyRequestHeaderParameters.HeaderActions = append(modifyRequestHeaderParameters.HeaderActions, &headerAction)
+ }
+ }
+ ruleEngineAction.ModifyRequestHeaderParameters = &modifyRequestHeaderParameters
+ }
+ if responseSpeedLimitParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["response_speed_limit_parameters"]); ok {
+ responseSpeedLimitParameters := teov20220901.ResponseSpeedLimitParameters{}
+ if v, ok := responseSpeedLimitParametersMap["mode"].(string); ok && v != "" {
+ responseSpeedLimitParameters.Mode = helper.String(v)
+ }
+ if v, ok := responseSpeedLimitParametersMap["max_speed"].(string); ok && v != "" {
+ responseSpeedLimitParameters.MaxSpeed = helper.String(v)
+ }
+ if v, ok := responseSpeedLimitParametersMap["start_at"].(string); ok && v != "" {
+ responseSpeedLimitParameters.StartAt = helper.String(v)
+ }
+ ruleEngineAction.ResponseSpeedLimitParameters = &responseSpeedLimitParameters
+ }
+ if setContentIdentifierParametersMap, ok := helper.ConvertInterfacesHeadToMap(actionsMap["set_content_identifier_parameters"]); ok {
+ setContentIdentifierParameters := teov20220901.SetContentIdentifierParameters{}
+ if v, ok := setContentIdentifierParametersMap["content_identifier"].(string); ok && v != "" {
+ setContentIdentifierParameters.ContentIdentifier = helper.String(v)
+ }
+ ruleEngineAction.SetContentIdentifierParameters = &setContentIdentifierParameters
+ }
+ ruleBranch.Actions = append(ruleBranch.Actions, &ruleEngineAction)
+ }
+ }
+
+ if v, ok := branchesMap["sub_rules"]; ok {
+ for _, item := range v.([]interface{}) {
+ subRulesMap := item.(map[string]interface{})
+ ruleEngineSubRule := teov20220901.RuleEngineSubRule{}
+ if _, ok := subRulesMap["branches"]; ok {
+ branchs := resourceTencentCloudTeoL7AccRuleGetBranchs(subRulesMap)
+ ruleEngineSubRule.Branches = branchs
+ }
+ if v, ok := subRulesMap["description"]; ok {
+ descriptionSet := v.([]interface{})
+ for i := range descriptionSet {
+ description := descriptionSet[i].(string)
+ ruleEngineSubRule.Description = append(ruleEngineSubRule.Description, helper.String(description))
+ }
+ }
+ ruleBranch.SubRules = append(ruleBranch.SubRules, &ruleEngineSubRule)
+ }
+ }
+ ruleBranchs = append(ruleBranchs, &ruleBranch)
+ }
+ }
+
+ return ruleBranchs
+}
+
+func resourceTencentCloudTeoL7AccRuleSetBranchs(ruleBranches []*teo.RuleBranch) []map[string]interface{} {
+ branchesList := make([]map[string]interface{}, 0, len(ruleBranches))
+ if len(ruleBranches) > 0 {
+ for _, branches := range ruleBranches {
+ branchesMap := map[string]interface{}{}
+
+ if branches.Condition != nil {
+ branchesMap["condition"] = branches.Condition
+ }
+
+ actionsList := make([]map[string]interface{}, 0, len(branches.Actions))
+ if branches.Actions != nil {
+ for _, actions := range branches.Actions {
+ actionsMap := map[string]interface{}{}
+
+ if actions.Name != nil {
+ actionsMap["name"] = actions.Name
+ }
+
+ cacheParametersMap := map[string]interface{}{}
+
+ if actions.CacheParameters != nil {
+ followOriginMap := map[string]interface{}{}
+
+ if actions.CacheParameters.FollowOrigin != nil {
+ if actions.CacheParameters.FollowOrigin.Switch != nil {
+ followOriginMap["switch"] = actions.CacheParameters.FollowOrigin.Switch
+ }
+
+ if actions.CacheParameters.FollowOrigin.DefaultCache != nil {
+ followOriginMap["default_cache"] = actions.CacheParameters.FollowOrigin.DefaultCache
+ }
+
+ if actions.CacheParameters.FollowOrigin.DefaultCacheStrategy != nil {
+ followOriginMap["default_cache_strategy"] = actions.CacheParameters.FollowOrigin.DefaultCacheStrategy
+ }
+
+ if actions.CacheParameters.FollowOrigin.DefaultCacheTime != nil {
+ followOriginMap["default_cache_time"] = actions.CacheParameters.FollowOrigin.DefaultCacheTime
+ }
+
+ cacheParametersMap["follow_origin"] = []interface{}{followOriginMap}
+ }
+
+ noCacheMap := map[string]interface{}{}
+
+ if actions.CacheParameters.NoCache != nil {
+ if actions.CacheParameters.NoCache.Switch != nil {
+ noCacheMap["switch"] = actions.CacheParameters.NoCache.Switch
+ }
+
+ cacheParametersMap["no_cache"] = []interface{}{noCacheMap}
+ }
+
+ customTimeMap := map[string]interface{}{}
+
+ if actions.CacheParameters.CustomTime != nil {
+ if actions.CacheParameters.CustomTime.Switch != nil {
+ customTimeMap["switch"] = actions.CacheParameters.CustomTime.Switch
+ }
+
+ if actions.CacheParameters.CustomTime.IgnoreCacheControl != nil {
+ customTimeMap["ignore_cache_control"] = actions.CacheParameters.CustomTime.IgnoreCacheControl
+ }
+
+ if actions.CacheParameters.CustomTime.CacheTime != nil {
+ customTimeMap["cache_time"] = actions.CacheParameters.CustomTime.CacheTime
+ }
+
+ cacheParametersMap["custom_time"] = []interface{}{customTimeMap}
+ }
+
+ actionsMap["cache_parameters"] = []interface{}{cacheParametersMap}
+ }
+
+ cacheKeyParametersMap := map[string]interface{}{}
+
+ if actions.CacheKeyParameters != nil {
+ if actions.CacheKeyParameters.FullURLCache != nil {
+ cacheKeyParametersMap["full_url_cache"] = actions.CacheKeyParameters.FullURLCache
+ }
+
+ queryStringMap := map[string]interface{}{}
+
+ if actions.CacheKeyParameters.QueryString != nil {
+ if actions.CacheKeyParameters.QueryString.Switch != nil {
+ queryStringMap["switch"] = actions.CacheKeyParameters.QueryString.Switch
+ }
+
+ if actions.CacheKeyParameters.QueryString.Action != nil {
+ queryStringMap["action"] = actions.CacheKeyParameters.QueryString.Action
+ }
+
+ if actions.CacheKeyParameters.QueryString.Values != nil {
+ queryStringMap["values"] = actions.CacheKeyParameters.QueryString.Values
+ }
+
+ cacheKeyParametersMap["query_string"] = []interface{}{queryStringMap}
+ }
+
+ if actions.CacheKeyParameters.IgnoreCase != nil {
+ cacheKeyParametersMap["ignore_case"] = actions.CacheKeyParameters.IgnoreCase
+ }
+
+ headerMap := map[string]interface{}{}
+
+ if actions.CacheKeyParameters.Header != nil {
+ if actions.CacheKeyParameters.Header.Switch != nil {
+ headerMap["switch"] = actions.CacheKeyParameters.Header.Switch
+ }
+
+ if actions.CacheKeyParameters.Header.Values != nil {
+ headerMap["values"] = actions.CacheKeyParameters.Header.Values
+ }
+
+ cacheKeyParametersMap["header"] = []interface{}{headerMap}
+ }
+
+ if actions.CacheKeyParameters.Scheme != nil {
+ cacheKeyParametersMap["scheme"] = actions.CacheKeyParameters.Scheme
+ }
+
+ cookieMap := map[string]interface{}{}
+
+ if actions.CacheKeyParameters.Cookie != nil {
+ if actions.CacheKeyParameters.Cookie.Switch != nil {
+ cookieMap["switch"] = actions.CacheKeyParameters.Cookie.Switch
+ }
+
+ if actions.CacheKeyParameters.Cookie.Action != nil {
+ cookieMap["action"] = actions.CacheKeyParameters.Cookie.Action
+ }
+
+ if actions.CacheKeyParameters.Cookie.Values != nil {
+ cookieMap["values"] = actions.CacheKeyParameters.Cookie.Values
+ }
+
+ cacheKeyParametersMap["cookie"] = []interface{}{cookieMap}
+ }
+
+ actionsMap["cache_key_parameters"] = []interface{}{cacheKeyParametersMap}
+ }
+
+ cachePrefreshParametersMap := map[string]interface{}{}
+
+ if actions.CachePrefreshParameters != nil {
+ if actions.CachePrefreshParameters.Switch != nil {
+ cachePrefreshParametersMap["switch"] = actions.CachePrefreshParameters.Switch
+ }
+
+ if actions.CachePrefreshParameters.CacheTimePercent != nil {
+ cachePrefreshParametersMap["cache_time_percent"] = actions.CachePrefreshParameters.CacheTimePercent
+ }
+
+ actionsMap["cache_prefresh_parameters"] = []interface{}{cachePrefreshParametersMap}
+ }
+
+ accessURLRedirectParametersMap := map[string]interface{}{}
+
+ if actions.AccessURLRedirectParameters != nil {
+ if actions.AccessURLRedirectParameters.StatusCode != nil {
+ accessURLRedirectParametersMap["status_code"] = actions.AccessURLRedirectParameters.StatusCode
+ }
+
+ if actions.AccessURLRedirectParameters.Protocol != nil {
+ accessURLRedirectParametersMap["protocol"] = actions.AccessURLRedirectParameters.Protocol
+ }
+
+ hostNameMap := map[string]interface{}{}
+
+ if actions.AccessURLRedirectParameters.HostName != nil {
+ if actions.AccessURLRedirectParameters.HostName.Action != nil {
+ hostNameMap["action"] = actions.AccessURLRedirectParameters.HostName.Action
+ }
+
+ if actions.AccessURLRedirectParameters.HostName.Value != nil {
+ hostNameMap["value"] = actions.AccessURLRedirectParameters.HostName.Value
+ }
+
+ accessURLRedirectParametersMap["host_name"] = []interface{}{hostNameMap}
+ }
+
+ uRLPathMap := map[string]interface{}{}
+
+ if actions.AccessURLRedirectParameters.URLPath != nil {
+ if actions.AccessURLRedirectParameters.URLPath.Action != nil {
+ uRLPathMap["action"] = actions.AccessURLRedirectParameters.URLPath.Action
+ }
+
+ if actions.AccessURLRedirectParameters.URLPath.Regex != nil {
+ uRLPathMap["regex"] = actions.AccessURLRedirectParameters.URLPath.Regex
+ }
+
+ if actions.AccessURLRedirectParameters.URLPath.Value != nil {
+ uRLPathMap["value"] = actions.AccessURLRedirectParameters.URLPath.Value
+ }
+
+ accessURLRedirectParametersMap["url_path"] = []interface{}{uRLPathMap}
+ }
+
+ queryStringMap := map[string]interface{}{}
+
+ if actions.AccessURLRedirectParameters.QueryString != nil {
+ if actions.AccessURLRedirectParameters.QueryString.Action != nil {
+ queryStringMap["action"] = actions.AccessURLRedirectParameters.QueryString.Action
+ }
+
+ accessURLRedirectParametersMap["query_string"] = []interface{}{queryStringMap}
+ }
+
+ actionsMap["access_url_redirect_parameters"] = []interface{}{accessURLRedirectParametersMap}
+ }
+
+ upstreamURLRewriteParametersMap := map[string]interface{}{}
+
+ if actions.UpstreamURLRewriteParameters != nil {
+ if actions.UpstreamURLRewriteParameters.Type != nil {
+ upstreamURLRewriteParametersMap["type"] = actions.UpstreamURLRewriteParameters.Type
+ }
+
+ if actions.UpstreamURLRewriteParameters.Action != nil {
+ upstreamURLRewriteParametersMap["action"] = actions.UpstreamURLRewriteParameters.Action
+ }
+
+ if actions.UpstreamURLRewriteParameters.Value != nil {
+ upstreamURLRewriteParametersMap["value"] = actions.UpstreamURLRewriteParameters.Value
+ }
+
+ actionsMap["upstream_url_rewrite_parameters"] = []interface{}{upstreamURLRewriteParametersMap}
+ }
+
+ qUICParametersMap := map[string]interface{}{}
+
+ if actions.QUICParameters != nil {
+ if actions.QUICParameters.Switch != nil {
+ qUICParametersMap["switch"] = actions.QUICParameters.Switch
+ }
+
+ actionsMap["quic_parameters"] = []interface{}{qUICParametersMap}
+ }
+
+ webSocketParametersMap := map[string]interface{}{}
+
+ if actions.WebSocketParameters != nil {
+ if actions.WebSocketParameters.Switch != nil {
+ webSocketParametersMap["switch"] = actions.WebSocketParameters.Switch
+ }
+
+ if actions.WebSocketParameters.Timeout != nil {
+ webSocketParametersMap["timeout"] = actions.WebSocketParameters.Timeout
+ }
+
+ actionsMap["web_socket_parameters"] = []interface{}{webSocketParametersMap}
+ }
+
+ authenticationParametersMap := map[string]interface{}{}
+
+ if actions.AuthenticationParameters != nil {
+ if actions.AuthenticationParameters.AuthType != nil {
+ authenticationParametersMap["auth_type"] = actions.AuthenticationParameters.AuthType
+ }
+
+ if actions.AuthenticationParameters.SecretKey != nil {
+ authenticationParametersMap["secret_key"] = actions.AuthenticationParameters.SecretKey
+ }
+
+ if actions.AuthenticationParameters.Timeout != nil {
+ authenticationParametersMap["timeout"] = actions.AuthenticationParameters.Timeout
+ }
+
+ if actions.AuthenticationParameters.BackupSecretKey != nil {
+ authenticationParametersMap["backup_secret_key"] = actions.AuthenticationParameters.BackupSecretKey
+ }
+
+ if actions.AuthenticationParameters.AuthParam != nil {
+ authenticationParametersMap["auth_param"] = actions.AuthenticationParameters.AuthParam
+ }
+
+ if actions.AuthenticationParameters.TimeParam != nil {
+ authenticationParametersMap["time_param"] = actions.AuthenticationParameters.TimeParam
+ }
+
+ if actions.AuthenticationParameters.TimeFormat != nil {
+ authenticationParametersMap["time_format"] = actions.AuthenticationParameters.TimeFormat
+ }
+
+ actionsMap["authentication_parameters"] = []interface{}{authenticationParametersMap}
+ }
+
+ maxAgeParametersMap := map[string]interface{}{}
+
+ if actions.MaxAgeParameters != nil {
+ if actions.MaxAgeParameters.FollowOrigin != nil {
+ maxAgeParametersMap["follow_origin"] = actions.MaxAgeParameters.FollowOrigin
+ }
+
+ if actions.MaxAgeParameters.CacheTime != nil {
+ maxAgeParametersMap["cache_time"] = actions.MaxAgeParameters.CacheTime
+ }
+
+ actionsMap["max_age_parameters"] = []interface{}{maxAgeParametersMap}
+ }
+
+ statusCodeCacheParametersMap := map[string]interface{}{}
+
+ if actions.StatusCodeCacheParameters != nil {
+ statusCodeCacheParamsList := make([]map[string]interface{}, 0, len(actions.StatusCodeCacheParameters.StatusCodeCacheParams))
+ if actions.StatusCodeCacheParameters.StatusCodeCacheParams != nil {
+ for _, statusCodeCacheParams := range actions.StatusCodeCacheParameters.StatusCodeCacheParams {
+ statusCodeCacheParamsMap := map[string]interface{}{}
+
+ if statusCodeCacheParams.StatusCode != nil {
+ statusCodeCacheParamsMap["status_code"] = statusCodeCacheParams.StatusCode
+ }
+
+ if statusCodeCacheParams.CacheTime != nil {
+ statusCodeCacheParamsMap["cache_time"] = statusCodeCacheParams.CacheTime
+ }
+
+ statusCodeCacheParamsList = append(statusCodeCacheParamsList, statusCodeCacheParamsMap)
+ }
+
+ statusCodeCacheParametersMap["status_code_cache_params"] = statusCodeCacheParamsList
+ }
+ actionsMap["status_code_cache_parameters"] = []interface{}{statusCodeCacheParametersMap}
+ }
+
+ offlineCacheParametersMap := map[string]interface{}{}
+
+ if actions.OfflineCacheParameters != nil {
+ if actions.OfflineCacheParameters.Switch != nil {
+ offlineCacheParametersMap["switch"] = actions.OfflineCacheParameters.Switch
+ }
+
+ actionsMap["offline_cache_parameters"] = []interface{}{offlineCacheParametersMap}
+ }
+
+ smartRoutingParametersMap := map[string]interface{}{}
+
+ if actions.SmartRoutingParameters != nil {
+ if actions.SmartRoutingParameters.Switch != nil {
+ smartRoutingParametersMap["switch"] = actions.SmartRoutingParameters.Switch
+ }
+
+ actionsMap["smart_routing_parameters"] = []interface{}{smartRoutingParametersMap}
+ }
+
+ rangeOriginPullParametersMap := map[string]interface{}{}
+
+ if actions.RangeOriginPullParameters != nil {
+ if actions.RangeOriginPullParameters.Switch != nil {
+ rangeOriginPullParametersMap["switch"] = actions.RangeOriginPullParameters.Switch
+ }
+
+ actionsMap["range_origin_pull_parameters"] = []interface{}{rangeOriginPullParametersMap}
+ }
+
+ upstreamHTTP2ParametersMap := map[string]interface{}{}
+
+ if actions.UpstreamHTTP2Parameters != nil {
+ if actions.UpstreamHTTP2Parameters.Switch != nil {
+ upstreamHTTP2ParametersMap["switch"] = actions.UpstreamHTTP2Parameters.Switch
+ }
+
+ actionsMap["upstream_http2_parameters"] = []interface{}{upstreamHTTP2ParametersMap}
+ }
+
+ hostHeaderParametersMap := map[string]interface{}{}
+
+ if actions.HostHeaderParameters != nil {
+ if actions.HostHeaderParameters.Action != nil {
+ hostHeaderParametersMap["action"] = actions.HostHeaderParameters.Action
+ }
+
+ if actions.HostHeaderParameters.ServerName != nil {
+ hostHeaderParametersMap["server_name"] = actions.HostHeaderParameters.ServerName
+ }
+
+ actionsMap["host_header_parameters"] = []interface{}{hostHeaderParametersMap}
+ }
+
+ forceRedirectHTTPSParametersMap := map[string]interface{}{}
+
+ if actions.ForceRedirectHTTPSParameters != nil {
+ if actions.ForceRedirectHTTPSParameters.Switch != nil {
+ forceRedirectHTTPSParametersMap["switch"] = actions.ForceRedirectHTTPSParameters.Switch
+ }
+
+ if actions.ForceRedirectHTTPSParameters.RedirectStatusCode != nil {
+ forceRedirectHTTPSParametersMap["redirect_status_code"] = actions.ForceRedirectHTTPSParameters.RedirectStatusCode
+ }
+
+ actionsMap["force_redirect_https_parameters"] = []interface{}{forceRedirectHTTPSParametersMap}
+ }
+
+ compressionParametersMap := map[string]interface{}{}
+
+ if actions.CompressionParameters != nil {
+ if actions.CompressionParameters.Switch != nil {
+ compressionParametersMap["switch"] = actions.CompressionParameters.Switch
+ }
+
+ if actions.CompressionParameters.Algorithms != nil {
+ compressionParametersMap["algorithms"] = actions.CompressionParameters.Algorithms
+ }
+
+ actionsMap["compression_parameters"] = []interface{}{compressionParametersMap}
+ }
+
+ hSTSParametersMap := map[string]interface{}{}
+
+ if actions.HSTSParameters != nil {
+ if actions.HSTSParameters.Switch != nil {
+ hSTSParametersMap["switch"] = actions.HSTSParameters.Switch
+ }
+
+ if actions.HSTSParameters.Timeout != nil {
+ hSTSParametersMap["timeout"] = actions.HSTSParameters.Timeout
+ }
+
+ if actions.HSTSParameters.IncludeSubDomains != nil {
+ hSTSParametersMap["include_sub_domains"] = actions.HSTSParameters.IncludeSubDomains
+ }
+
+ if actions.HSTSParameters.Preload != nil {
+ hSTSParametersMap["preload"] = actions.HSTSParameters.Preload
+ }
+
+ actionsMap["hsts_parameters"] = []interface{}{hSTSParametersMap}
+ }
+
+ clientIPHeaderParametersMap := map[string]interface{}{}
+
+ if actions.ClientIPHeaderParameters != nil {
+ if actions.ClientIPHeaderParameters.Switch != nil {
+ clientIPHeaderParametersMap["switch"] = actions.ClientIPHeaderParameters.Switch
+ }
+
+ if actions.ClientIPHeaderParameters.HeaderName != nil {
+ clientIPHeaderParametersMap["header_name"] = actions.ClientIPHeaderParameters.HeaderName
+ }
+
+ actionsMap["client_ip_header_parameters"] = []interface{}{clientIPHeaderParametersMap}
+ }
+
+ oCSPStaplingParametersMap := map[string]interface{}{}
+
+ if actions.OCSPStaplingParameters != nil {
+ if actions.OCSPStaplingParameters.Switch != nil {
+ oCSPStaplingParametersMap["switch"] = actions.OCSPStaplingParameters.Switch
+ }
+
+ actionsMap["ocsp_stapling_parameters"] = []interface{}{oCSPStaplingParametersMap}
+ }
+
+ hTTP2ParametersMap := map[string]interface{}{}
+
+ if actions.HTTP2Parameters != nil {
+ if actions.HTTP2Parameters.Switch != nil {
+ hTTP2ParametersMap["switch"] = actions.HTTP2Parameters.Switch
+ }
+
+ actionsMap["http2_parameters"] = []interface{}{hTTP2ParametersMap}
+ }
+
+ postMaxSizeParametersMap := map[string]interface{}{}
+
+ if actions.PostMaxSizeParameters != nil {
+ if actions.PostMaxSizeParameters.Switch != nil {
+ postMaxSizeParametersMap["switch"] = actions.PostMaxSizeParameters.Switch
+ }
+
+ if actions.PostMaxSizeParameters.MaxSize != nil {
+ postMaxSizeParametersMap["max_size"] = actions.PostMaxSizeParameters.MaxSize
+ }
+
+ actionsMap["post_max_size_parameters"] = []interface{}{postMaxSizeParametersMap}
+ }
+
+ clientIPCountryParametersMap := map[string]interface{}{}
+
+ if actions.ClientIPCountryParameters != nil {
+ if actions.ClientIPCountryParameters.Switch != nil {
+ clientIPCountryParametersMap["switch"] = actions.ClientIPCountryParameters.Switch
+ }
+
+ if actions.ClientIPCountryParameters.HeaderName != nil {
+ clientIPCountryParametersMap["header_name"] = actions.ClientIPCountryParameters.HeaderName
+ }
+
+ actionsMap["client_ip_country_parameters"] = []interface{}{clientIPCountryParametersMap}
+ }
+
+ upstreamFollowRedirectParametersMap := map[string]interface{}{}
+
+ if actions.UpstreamFollowRedirectParameters != nil {
+ if actions.UpstreamFollowRedirectParameters.Switch != nil {
+ upstreamFollowRedirectParametersMap["switch"] = actions.UpstreamFollowRedirectParameters.Switch
+ }
+
+ if actions.UpstreamFollowRedirectParameters.MaxTimes != nil {
+ upstreamFollowRedirectParametersMap["max_times"] = actions.UpstreamFollowRedirectParameters.MaxTimes
+ }
+
+ actionsMap["upstream_follow_redirect_parameters"] = []interface{}{upstreamFollowRedirectParametersMap}
+ }
+
+ upstreamRequestParametersMap := map[string]interface{}{}
+
+ if actions.UpstreamRequestParameters != nil {
+ queryStringMap := map[string]interface{}{}
+
+ if actions.UpstreamRequestParameters.QueryString != nil {
+ if actions.UpstreamRequestParameters.QueryString.Switch != nil {
+ queryStringMap["switch"] = actions.UpstreamRequestParameters.QueryString.Switch
+ }
+
+ if actions.UpstreamRequestParameters.QueryString.Action != nil {
+ queryStringMap["action"] = actions.UpstreamRequestParameters.QueryString.Action
+ }
+
+ if actions.UpstreamRequestParameters.QueryString.Values != nil {
+ queryStringMap["values"] = actions.UpstreamRequestParameters.QueryString.Values
+ }
+
+ upstreamRequestParametersMap["query_string"] = []interface{}{queryStringMap}
+ }
+
+ cookieMap := map[string]interface{}{}
+
+ if actions.UpstreamRequestParameters.Cookie != nil {
+ if actions.UpstreamRequestParameters.Cookie.Switch != nil {
+ cookieMap["switch"] = actions.UpstreamRequestParameters.Cookie.Switch
+ }
+
+ if actions.UpstreamRequestParameters.Cookie.Action != nil {
+ cookieMap["action"] = actions.UpstreamRequestParameters.Cookie.Action
+ }
+
+ if actions.UpstreamRequestParameters.Cookie.Values != nil {
+ cookieMap["values"] = actions.UpstreamRequestParameters.Cookie.Values
+ }
+
+ upstreamRequestParametersMap["cookie"] = []interface{}{cookieMap}
+ }
+
+ actionsMap["upstream_request_parameters"] = []interface{}{upstreamRequestParametersMap}
+ }
+
+ tLSConfigParametersMap := map[string]interface{}{}
+
+ if actions.TLSConfigParameters != nil {
+ if actions.TLSConfigParameters.Version != nil {
+ tLSConfigParametersMap["version"] = actions.TLSConfigParameters.Version
+ }
+
+ if actions.TLSConfigParameters.CipherSuite != nil {
+ tLSConfigParametersMap["cipher_suite"] = actions.TLSConfigParameters.CipherSuite
+ }
+
+ actionsMap["tls_config_parameters"] = []interface{}{tLSConfigParametersMap}
+ }
+
+ modifyOriginParametersMap := map[string]interface{}{}
+
+ if actions.ModifyOriginParameters != nil {
+ if actions.ModifyOriginParameters.OriginType != nil {
+ modifyOriginParametersMap["origin_type"] = actions.ModifyOriginParameters.OriginType
+ }
+
+ if actions.ModifyOriginParameters.Origin != nil {
+ modifyOriginParametersMap["origin"] = actions.ModifyOriginParameters.Origin
+ }
+
+ if actions.ModifyOriginParameters.OriginProtocol != nil {
+ modifyOriginParametersMap["origin_protocol"] = actions.ModifyOriginParameters.OriginProtocol
+ }
+
+ if actions.ModifyOriginParameters.HTTPOriginPort != nil {
+ modifyOriginParametersMap["http_origin_port"] = actions.ModifyOriginParameters.HTTPOriginPort
+ }
+
+ if actions.ModifyOriginParameters.HTTPSOriginPort != nil {
+ modifyOriginParametersMap["https_origin_port"] = actions.ModifyOriginParameters.HTTPSOriginPort
+ }
+
+ if actions.ModifyOriginParameters.PrivateAccess != nil {
+ modifyOriginParametersMap["private_access"] = actions.ModifyOriginParameters.PrivateAccess
+ }
+
+ privateParametersMap := map[string]interface{}{}
+
+ if actions.ModifyOriginParameters.PrivateParameters != nil {
+ if actions.ModifyOriginParameters.PrivateParameters.AccessKeyId != nil {
+ privateParametersMap["access_key_id"] = actions.ModifyOriginParameters.PrivateParameters.AccessKeyId
+ }
+
+ if actions.ModifyOriginParameters.PrivateParameters.SecretAccessKey != nil {
+ privateParametersMap["secret_access_key"] = actions.ModifyOriginParameters.PrivateParameters.SecretAccessKey
+ }
+
+ if actions.ModifyOriginParameters.PrivateParameters.SignatureVersion != nil {
+ privateParametersMap["signature_version"] = actions.ModifyOriginParameters.PrivateParameters.SignatureVersion
+ }
+
+ if actions.ModifyOriginParameters.PrivateParameters.Region != nil {
+ privateParametersMap["region"] = actions.ModifyOriginParameters.PrivateParameters.Region
+ }
+
+ modifyOriginParametersMap["private_parameters"] = []interface{}{privateParametersMap}
+ }
+
+ actionsMap["modify_origin_parameters"] = []interface{}{modifyOriginParametersMap}
+ }
+
+ hTTPUpstreamTimeoutParametersMap := map[string]interface{}{}
+
+ if actions.HTTPUpstreamTimeoutParameters != nil {
+ if actions.HTTPUpstreamTimeoutParameters.ResponseTimeout != nil {
+ hTTPUpstreamTimeoutParametersMap["response_timeout"] = actions.HTTPUpstreamTimeoutParameters.ResponseTimeout
+ }
+
+ actionsMap["http_upstream_timeout_parameters"] = []interface{}{hTTPUpstreamTimeoutParametersMap}
+ }
+
+ httpResponseParametersMap := map[string]interface{}{}
+
+ if actions.HttpResponseParameters != nil {
+ if actions.HttpResponseParameters.StatusCode != nil {
+ httpResponseParametersMap["status_code"] = actions.HttpResponseParameters.StatusCode
+ }
+
+ if actions.HttpResponseParameters.ResponsePage != nil {
+ httpResponseParametersMap["response_page"] = actions.HttpResponseParameters.ResponsePage
+ }
+
+ actionsMap["http_response_parameters"] = []interface{}{httpResponseParametersMap}
+ }
+
+ errorPageParametersMap := map[string]interface{}{}
+
+ if actions.ErrorPageParameters != nil {
+ errorPageParamsList := make([]map[string]interface{}, 0, len(actions.ErrorPageParameters.ErrorPageParams))
+ if actions.ErrorPageParameters.ErrorPageParams != nil {
+ for _, errorPageParams := range actions.ErrorPageParameters.ErrorPageParams {
+ errorPageParamsMap := map[string]interface{}{}
+
+ if errorPageParams.StatusCode != nil {
+ errorPageParamsMap["status_code"] = errorPageParams.StatusCode
+ }
+
+ if errorPageParams.RedirectURL != nil {
+ errorPageParamsMap["redirect_url"] = errorPageParams.RedirectURL
+ }
+
+ errorPageParamsList = append(errorPageParamsList, errorPageParamsMap)
+ }
+
+ errorPageParametersMap["error_page_params"] = errorPageParamsList
+ }
+ actionsMap["error_page_parameters"] = []interface{}{errorPageParametersMap}
+ }
+
+ modifyResponseHeaderParametersMap := map[string]interface{}{}
+
+ if actions.ModifyResponseHeaderParameters != nil {
+ headerActionsList := make([]map[string]interface{}, 0, len(actions.ModifyResponseHeaderParameters.HeaderActions))
+ if actions.ModifyResponseHeaderParameters.HeaderActions != nil {
+ for _, headerActions := range actions.ModifyResponseHeaderParameters.HeaderActions {
+ headerActionsMap := map[string]interface{}{}
+
+ if headerActions.Action != nil {
+ headerActionsMap["action"] = headerActions.Action
+ }
+
+ if headerActions.Name != nil {
+ headerActionsMap["name"] = headerActions.Name
+ }
+
+ if headerActions.Value != nil {
+ headerActionsMap["value"] = headerActions.Value
+ }
+
+ headerActionsList = append(headerActionsList, headerActionsMap)
+ }
+
+ modifyResponseHeaderParametersMap["header_actions"] = headerActionsList
+ }
+ actionsMap["modify_response_header_parameters"] = []interface{}{modifyResponseHeaderParametersMap}
+ }
+
+ modifyRequestHeaderParametersMap := map[string]interface{}{}
+
+ if actions.ModifyRequestHeaderParameters != nil {
+ headerActionsList := make([]map[string]interface{}, 0, len(actions.ModifyRequestHeaderParameters.HeaderActions))
+ if actions.ModifyRequestHeaderParameters.HeaderActions != nil {
+ for _, headerActions := range actions.ModifyRequestHeaderParameters.HeaderActions {
+ headerActionsMap := map[string]interface{}{}
+
+ if headerActions.Action != nil {
+ headerActionsMap["action"] = headerActions.Action
+ }
+
+ if headerActions.Name != nil {
+ headerActionsMap["name"] = headerActions.Name
+ }
+
+ if headerActions.Value != nil {
+ headerActionsMap["value"] = headerActions.Value
+ }
+
+ headerActionsList = append(headerActionsList, headerActionsMap)
+ }
+
+ modifyRequestHeaderParametersMap["header_actions"] = headerActionsList
+ }
+ actionsMap["modify_request_header_parameters"] = []interface{}{modifyRequestHeaderParametersMap}
+ }
+
+ responseSpeedLimitParametersMap := map[string]interface{}{}
+
+ if actions.ResponseSpeedLimitParameters != nil {
+ if actions.ResponseSpeedLimitParameters.Mode != nil {
+ responseSpeedLimitParametersMap["mode"] = actions.ResponseSpeedLimitParameters.Mode
+ }
+
+ if actions.ResponseSpeedLimitParameters.MaxSpeed != nil {
+ responseSpeedLimitParametersMap["max_speed"] = actions.ResponseSpeedLimitParameters.MaxSpeed
+ }
+
+ if actions.ResponseSpeedLimitParameters.StartAt != nil {
+ responseSpeedLimitParametersMap["start_at"] = actions.ResponseSpeedLimitParameters.StartAt
+ }
+
+ actionsMap["response_speed_limit_parameters"] = []interface{}{responseSpeedLimitParametersMap}
+ }
+
+ setContentIdentifierParametersMap := map[string]interface{}{}
+
+ if actions.SetContentIdentifierParameters != nil {
+ if actions.SetContentIdentifierParameters.ContentIdentifier != nil {
+ setContentIdentifierParametersMap["content_identifier"] = actions.SetContentIdentifierParameters.ContentIdentifier
+ }
+
+ actionsMap["set_content_identifier_parameters"] = []interface{}{setContentIdentifierParametersMap}
+ }
+
+ actionsList = append(actionsList, actionsMap)
+ }
+
+ branchesMap["actions"] = actionsList
+ }
+
+ subRulesList := make([]map[string]interface{}, 0, len(branches.SubRules))
+ if branches.SubRules != nil {
+ for _, subRules := range branches.SubRules {
+ subRulesMap := map[string]interface{}{}
+
+ if subRules.Branches != nil {
+ subRulesMap["branches"] = resourceTencentCloudTeoL7AccRuleSetBranchs(subRules.Branches)
+ }
+
+ if subRules.Description != nil {
+ subRulesMap["description"] = subRules.Description
+ }
+
+ subRulesList = append(subRulesList, subRulesMap)
+ }
+
+ branchesMap["sub_rules"] = subRulesList
+ }
+
+ branchesList = append(branchesList, branchesMap)
+ }
+ }
+ return branchesList
+}
diff --git a/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_test.go b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_test.go
new file mode 100644
index 0000000000..cbe6f50edd
--- /dev/null
+++ b/tencentcloud/services/teo/resource_tc_teo_l7_acc_rule_test.go
@@ -0,0 +1,738 @@
+package teo_test
+
+import (
+ "testing"
+
+ "github.com/hashicorp/terraform-plugin-sdk/v2/helper/resource"
+ tcacctest "github.com/tencentcloudstack/terraform-provider-tencentcloud/tencentcloud/acctest"
+)
+
+// go test -test.run TestAccTencentCloudTeoL7AccRuleResource_basic -v
+func TestAccTencentCloudTeoL7AccRuleResource_basic(t *testing.T) {
+ t.Parallel()
+ resource.Test(t, resource.TestCase{
+ PreCheck: func() { tcacctest.AccPreCheckCommon(t, tcacctest.ACCOUNT_TYPE_PRIVATE) },
+ Providers: tcacctest.AccProviders,
+ Steps: []resource.TestStep{
+ {
+ Config: testAccTeoL7AccRule,
+ Check: resource.ComposeTestCheckFunc(
+ resource.TestCheckResourceAttrSet("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "id"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "zone_id", "zone-36bjhygh1bxe"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.#", "6"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.rule_name", "网站加速"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.status", "enable"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.condition", "${http.request.host} in ['aaa.makn.cn']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.#", "2"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.name", "Cache"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.cache_time", "2592000"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.ignore_cache_control", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.switch", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.name", "CacheKey"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.full_url_cache", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.ignore_case", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.scheme", ""),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.action", ""),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.switch", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.values.#", "0"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.#", "2"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.condition", "lower(${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.name", "Cache"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.0.no_cache.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.0.no_cache.0.switch", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.condition", "${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.name", "MaxAge"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.0.cache_time", "3600"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.0.follow_origin", "off"),
+ ),
+ },
+ {
+ ResourceName: "tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule",
+ ImportState: true,
+ ImportStateVerify: true,
+ },
+ {
+ Config: testAccTeoL7AccRuleUp,
+ Check: resource.ComposeTestCheckFunc(
+ resource.TestCheckResourceAttrSet("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "id"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "zone_id", "zone-36bjhygh1bxe"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.#", "6"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.rule_name", "网站加速"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.status", "disable"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.condition", "${http.request.host} in ['aaa.makn.cn']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.#", "2"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.name", "Cache"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.cache_time", "2592000"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.ignore_cache_control", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.0.cache_parameters.0.custom_time.0.switch", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.name", "CacheKey"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.full_url_cache", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.ignore_case", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.scheme", ""),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.action", ""),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.switch", "off"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.actions.1.cache_key_parameters.0.query_string.0.values.#", "0"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.#", "2"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.condition", "lower(${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.name", "Cache"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.0.no_cache.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.0.branches.0.actions.0.cache_parameters.0.no_cache.0.switch", "on"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.description.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.condition", "${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.name", "MaxAge"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.#", "1"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.0.cache_time", "3600"),
+ resource.TestCheckResourceAttr("tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule", "rules.0.branches.0.sub_rules.1.branches.0.actions.0.max_age_parameters.0.follow_origin", "off"),
+ ),
+ },
+ },
+ })
+}
+
+const testAccTeoL7AccRule = `
+
+resource "tencentcloud_teo_l7_acc_rule" "teo_l7_acc_rule" {
+ zone_id = "zone-36bjhygh1bxe"
+ rules {
+ description = ["1"]
+ rule_name = "网站加速"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "on"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-1"]
+ branches {
+ condition = "lower($${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-2"]
+ branches {
+ condition = "$${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"
+ actions {
+ name = "MaxAge"
+ max_age_parameters {
+ cache_time = 3600
+ follow_origin = "off"
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["2"]
+ rule_name = "音视频直播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["2-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['m3u8', 'mpd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 1
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['ts', 'mp4', 'm4a', 'm4s']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 86400
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["3"]
+ rule_name = "大文件下载"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = null
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["3-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["4"]
+ rule_name = "音视频点播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["4-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["5"]
+ rule_name = "API 加速"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "SmartRouting"
+ smart_routing_parameters {
+ switch = "off"
+ }
+ }
+ }
+ }
+ rules {
+ description = ["6"]
+ rule_name = "WordPress 建站"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["6-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['gif', 'png', 'bmp', 'jpeg', 'tif', 'tiff', 'zip', 'exe', 'wmv', 'swf', 'mp3', 'wma', 'rar', 'css', 'flv', 'mp4', 'txt', 'ico', 'js']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 604800
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['aspx', 'jsp', 'php', 'asp', 'do', 'dwr', 'cgi', 'fcgi', 'action', 'ashx', 'axd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/wp-admin/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+}
+`
+
+const testAccTeoL7AccRuleUp = `
+
+resource "tencentcloud_teo_l7_acc_rule" "teo_l7_acc_rule" {
+ zone_id = "zone-36bjhygh1bxe"
+ rules {
+ description = ["1"]
+ rule_name = "网站加速"
+ status = "disable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "on"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-1"]
+ branches {
+ condition = "lower($${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-2"]
+ branches {
+ condition = "$${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"
+ actions {
+ name = "MaxAge"
+ max_age_parameters {
+ cache_time = 3600
+ follow_origin = "off"
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["2"]
+ rule_name = "音视频直播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["2-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['m3u8', 'mpd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 1
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['ts', 'mp4', 'm4a', 'm4s']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 86400
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["3"]
+ rule_name = "大文件下载"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = null
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["3-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["4"]
+ rule_name = "音视频点播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["4-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["5"]
+ rule_name = "API 加速"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "SmartRouting"
+ smart_routing_parameters {
+ switch = "off"
+ }
+ }
+ }
+ }
+ rules {
+ description = ["6"]
+ rule_name = "WordPress 建站"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["6-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['gif', 'png', 'bmp', 'jpeg', 'tif', 'tiff', 'zip', 'exe', 'wmv', 'swf', 'mp3', 'wma', 'rar', 'css', 'flv', 'mp4', 'txt', 'ico', 'js']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 604800
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['aspx', 'jsp', 'php', 'asp', 'do', 'dwr', 'cgi', 'fcgi', 'action', 'ashx', 'axd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/wp-admin/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+}
+`
diff --git a/tencentcloud/services/teo/resource_tc_teo_rule_engine.md b/tencentcloud/services/teo/resource_tc_teo_rule_engine.md
index 397bd89da9..0c50147dcc 100644
--- a/tencentcloud/services/teo/resource_tc_teo_rule_engine.md
+++ b/tencentcloud/services/teo/resource_tc_teo_rule_engine.md
@@ -1,5 +1,7 @@
Provides a resource to create a teo rule_engine
+~> **NOTE:** The current resource has been deprecated, please use `tencentcloud_teo_l7_acc_rule`.
+
Example Usage
```hcl
diff --git a/tencentcloud/services/teo/service_tencentcloud_teo.go b/tencentcloud/services/teo/service_tencentcloud_teo.go
index df35b6331a..4c54a20b1f 100644
--- a/tencentcloud/services/teo/service_tencentcloud_teo.go
+++ b/tencentcloud/services/teo/service_tencentcloud_teo.go
@@ -1585,3 +1585,28 @@ func (me *TeoService) DescribeTeoL4ProxyRuleById(ctx context.Context, zoneId str
ret = instances[0]
return
}
+
+func (me *TeoService) DescribeTeoL7AccRuleById(ctx context.Context, zoneId string) (ret *teov20220901.DescribeL7AccRulesResponseParams, errRet error) {
+ logId := tccommon.GetLogId(ctx)
+
+ request := teov20220901.NewDescribeL7AccRulesRequest()
+ request.ZoneId = helper.String(zoneId)
+
+ defer func() {
+ if errRet != nil {
+ log.Printf("[CRITAL]%s api[%s] fail, request body [%s], reason[%s]\n", logId, request.GetAction(), request.ToJsonString(), errRet.Error())
+ }
+ }()
+
+ ratelimit.Check(request.GetAction())
+
+ response, err := me.client.UseTeoV20220901Client().DescribeL7AccRules(request)
+ if err != nil {
+ errRet = err
+ return
+ }
+ log.Printf("[DEBUG]%s api[%s] success, request body [%s], response body [%s]\n", logId, request.GetAction(), request.ToJsonString(), response.ToJsonString())
+
+ ret = response.Response
+ return
+}
diff --git a/website/docs/r/teo_l7_acc_rule.html.markdown b/website/docs/r/teo_l7_acc_rule.html.markdown
new file mode 100644
index 0000000000..bdc311d9a6
--- /dev/null
+++ b/website/docs/r/teo_l7_acc_rule.html.markdown
@@ -0,0 +1,723 @@
+---
+subcategory: "TencentCloud EdgeOne(TEO)"
+layout: "tencentcloud"
+page_title: "TencentCloud: tencentcloud_teo_l7_acc_rule"
+sidebar_current: "docs-tencentcloud-resource-teo_l7_acc_rule"
+description: |-
+ Provides a resource to create a teo l7_acc_rule
+---
+
+# tencentcloud_teo_l7_acc_rule
+
+Provides a resource to create a teo l7_acc_rule
+
+## Example Usage
+
+```hcl
+resource "tencentcloud_teo_l7_acc_rule" "teo_l7_acc_rule" {
+ zone_id = "zone-36bjhygh1bxe"
+ rules {
+ description = ["1"]
+ rule_name = "网站加速"
+ status = "disable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "on"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-1"]
+ branches {
+ condition = "lower($${http.request.file_extension}) in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ sub_rules {
+ description = ["1-2"]
+ branches {
+ condition = "$${http.request.file_extension} in ['jpg', 'png', 'gif', 'bmp', 'svg', 'webp']"
+ actions {
+ name = "MaxAge"
+ max_age_parameters {
+ cache_time = 3600
+ follow_origin = "off"
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["2"]
+ rule_name = "音视频直播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["2-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['m3u8', 'mpd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 1
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['ts', 'mp4', 'm4a', 'm4s']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 86400
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["3"]
+ rule_name = "大文件下载"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = null
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["3-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["4"]
+ rule_name = "音视频点播"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 2592000
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "CacheKey"
+ cache_key_parameters {
+ full_url_cache = "off"
+ ignore_case = "off"
+ scheme = null
+ query_string {
+ action = null
+ switch = "off"
+ values = []
+ }
+ }
+ }
+ actions {
+ name = "RangeOriginPull"
+ range_origin_pull_parameters {
+ switch = "on"
+ }
+ }
+ sub_rules {
+ description = ["4-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['php', 'jsp', 'asp', 'aspx']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+ rules {
+ description = ["5"]
+ rule_name = "API 加速"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ actions {
+ name = "SmartRouting"
+ smart_routing_parameters {
+ switch = "off"
+ }
+ }
+ }
+ }
+ rules {
+ description = ["6"]
+ rule_name = "WordPress 建站"
+ status = "enable"
+ branches {
+ condition = "$${http.request.host} in ['aaa.makn.cn']"
+ sub_rules {
+ description = ["6-1"]
+ branches {
+ condition = "$${http.request.file_extension} in ['gif', 'png', 'bmp', 'jpeg', 'tif', 'tiff', 'zip', 'exe', 'wmv', 'swf', 'mp3', 'wma', 'rar', 'css', 'flv', 'mp4', 'txt', 'ico', 'js']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ custom_time {
+ cache_time = 604800
+ ignore_cache_control = "off"
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.file_extension} in ['aspx', 'jsp', 'php', 'asp', 'do', 'dwr', 'cgi', 'fcgi', 'action', 'ashx', 'axd']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "$${http.request.uri.path} in ['/wp-admin/']"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ no_cache {
+ switch = "on"
+ }
+ }
+ }
+ }
+ branches {
+ condition = "*"
+ actions {
+ name = "Cache"
+ cache_parameters {
+ follow_origin {
+ default_cache = "on"
+ default_cache_strategy = "on"
+ default_cache_time = 0
+ switch = "on"
+ }
+ }
+ }
+ }
+ }
+ }
+ }
+}
+```
+
+## Argument Reference
+
+The following arguments are supported:
+
+* `zone_id` - (Required, String, ForceNew) Zone id.
+* `rules` - (Optional, List) Rules content.
+
+The `access_url_redirect_parameters` object of `actions` supports the following:
+
+* `host_name` - (Optional, List) Target hostname.
+* `protocol` - (Optional, String) Target request protocol. valid values: http: target request protocol http; https: target request protocol https; follow: follow the request.
+* `query_string` - (Optional, List) Carry query parameters.
+* `status_code` - (Optional, Int) Status code. valid values: 301, 302, 303, 307, 308.
+* `url_path` - (Optional, List) Target path.
+
+The `actions` object of `branches` supports the following:
+
+* `name` - (Required, String) Operation name. The name needs to correspond to the parameter structure, for example, if Name=Cache, CacheParameters is required.
+- `Cache`: Node cache TTL;
+- `CacheKey`: Custom Cache Key;
+- `CachePrefresh`: Cache pre-refresh;
+- `AccessURLRedirect`: Access URL redirection;
+- `UpstreamURLRewrite`: Back-to-origin URL rewrite;
+- `QUIC`: QUIC;
+- `WebSocket`: WebSocket;
+- `Authentication`: Token authentication;
+- `MaxAge`: Browser cache TTL;
+- `StatusCodeCache`: Status code cache TTL;
+- `OfflineCache`: Offline cache;
+- `SmartRouting`: Smart acceleration;
+- `RangeOriginPull`: Segment back-to-origin;
+- `UpstreamHTTP2`: HTTP2 back-to-origin;
+- `HostHeader`: Host Header rewrite;
+- `ForceRedirectHTTPS`: Access protocol forced HTTPS jump configuration;
+- `OriginPullProtocol`: Back-to-origin HTTPS;
+- `Compression`: Smart compression configuration;
+- `HSTS`: HSTS;
+- `ClientIPHeader`: Header information configuration for storing client request IP;
+- `OCSPStapling`: OCSP stapling;
+- `HTTP2`: HTTP2 Access;
+- `PostMaxSize`: POST request upload file streaming maximum limit configuration;
+- `ClientIPCountry`: Carry client IP region information when returning to the source;
+- `UpstreamFollowRedirect`: Return to the source follow redirection parameter configuration;
+- `UpstreamRequest`: Return to the source request parameters;
+- `TLSConfig`: SSL/TLS security;
+- `ModifyOrigin`: Modify the source station;
+- `HTTPUpstreamTimeout`: Seven-layer return to the source timeout configuration;
+- `HttpResponse`: HTTP response;
+- `ErrorPage`: Custom error page;
+- `ModifyResponseHeader`: Modify HTTP node response header;
+- `ModifyRequestHeader`: Modify HTTP node request header;
+- `ResponseSpeedLimit`: Single connection download speed limit.
+- `SetContentIdentifierParameters`: Set content identifier.
+* `access_url_redirect_parameters` - (Optional, List) The access url redirection configuration parameter. this parameter is required when name is accessurlredirect.
+* `authentication_parameters` - (Optional, List) Token authentication configuration parameter. this parameter is required when name is authentication.
+* `cache_key_parameters` - (Optional, List) Custom cache key configuration parameter. when name is cachekey, this parameter is required.
+* `cache_parameters` - (Optional, List) Node cache ttl configuration parameter. when name is cache, this parameter is required.
+* `cache_prefresh_parameters` - (Optional, List) The cache prefresh configuration parameter. this parameter is required when name is cacheprefresh.
+* `client_ip_country_parameters` - (Optional, List) Configuration parameter for carrying the region information of the client ip during origin-pull. this parameter is required when the name is set to clientipcountry.
+* `client_ip_header_parameters` - (Optional, List) Client ip header configuration for storing client request ip information. this parameter is required when name is clientipheader.
+* `compression_parameters` - (Optional, List) Intelligent compression configuration. this parameter is required when name is set to compression.
+* `error_page_parameters` - (Optional, List) Custom error page configuration parameters. this parameter is required when name is errorpage.
+* `force_redirect_https_parameters` - (Optional, List) Force https redirect configuration parameter. this parameter is required when the name is set to forceredirecthttps.
+* `host_header_parameters` - (Optional, List) Host header rewrite configuration parameter. this parameter is required when name is set to hostheader.
+* `hsts_parameters` - (Optional, List) HSTS configuration parameter. this parameter is required when name is hsts.
+* `http2_parameters` - (Optional, List) HTTP2 access configuration parameter. this parameter is required when name is http2.
+* `http_response_parameters` - (Optional, List) HTTP response configuration parameters. this parameter is required when name is httpresponse.
+* `http_upstream_timeout_parameters` - (Optional, List) Configuration of layer 7 origin timeout. this parameter is required when name is httpupstreamtimeout.
+* `max_age_parameters` - (Optional, List) Browser cache ttl configuration parameter. this parameter is required when name is maxage.
+* `modify_origin_parameters` - (Optional, List) Configuration parameter for modifying the origin server. this parameter is required when the name is set to modifyorigin.
+* `modify_request_header_parameters` - (Optional, List) Modify http node request header configuration parameters. this parameter is required when name is modifyrequestheader.
+* `modify_response_header_parameters` - (Optional, List) Modify http node response header configuration parameters. this parameter is required when name is modifyresponseheader.
+* `ocsp_stapling_parameters` - (Optional, List) OCSP stapling configuration parameter. this parameter is required when the name is set to ocspstapling.
+* `offline_cache_parameters` - (Optional, List) Offline cache configuration parameter. this parameter is required when name is offlinecache.
+* `post_max_size_parameters` - (Optional, List) Maximum size configuration for file streaming upload via a post request. this parameter is required when name is postmaxsize.
+* `quic_parameters` - (Optional, List) The quic configuration parameter. this parameter is required when name is quic.
+* `range_origin_pull_parameters` - (Optional, List) Shard source retrieval configuration parameter. this parameter is required when name is set to rangeoriginpull.
+* `response_speed_limit_parameters` - (Optional, List) Single connection download speed limit configuration parameter. this parameter is required when name is responsespeedlimit.
+* `set_content_identifier_parameters` - (Optional, List) Content identification configuration parameter. this parameter is required when name is httpresponse.
+* `smart_routing_parameters` - (Optional, List) Smart acceleration configuration parameter. this parameter is required when name is smartrouting.
+* `status_code_cache_parameters` - (Optional, List) Status code cache ttl configuration parameter. this parameter is required when name is statuscodecache.
+* `tls_config_parameters` - (Optional, List) SSL/TLS security configuration parameter. this parameter is required when the name is set to tlsconfig.
+* `upstream_follow_redirect_parameters` - (Optional, List) Configuration parameter for following redirects during origin-pull. this parameter is required when the name is set to upstreamfollowredirect.
+* `upstream_http2_parameters` - (Optional, List) HTTP2 origin-pull configuration parameter. this parameter is required when name is set to upstreamhttp2.
+* `upstream_request_parameters` - (Optional, List) Configuration parameter for origin-pull request. this parameter is required when the name is set to upstreamrequest.
+* `upstream_url_rewrite_parameters` - (Optional, List) The origin-pull url rewrite configuration parameter. this parameter is required when name is upstreamurlrewrite.
+* `web_socket_parameters` - (Optional, List) The websocket configuration parameter. this parameter is required when name is websocket.
+
+The `authentication_parameters` object of `actions` supports the following:
+
+* `auth_param` - (Optional, String) Authentication parameters name. the node will validate the value corresponding to this parameter name. consists of 1-100 uppercase and lowercase letters, numbers, or underscores.note: this field is required when authtype is either typea or typed.
+* `auth_type` - (Optional, String) Authentication type. valid values:
+- `TypeA`: authentication method a type, for specific meaning please refer to authentication method a. https://www.tencentcloud.com/document/product/1145/62475;
+- `TypeB`: authentication method b type, for specific meaning please refer to authentication method b. https://www.tencentcloud.com/document/product/1145/62476;
+- `TypeC`: authentication method c type, for specific meaning please refer to authentication method c. https://www.tencentcloud.com/document/product/1145/62477;
+- `TypeD`: authentication method d type, for specific meaning please refer to authentication method d. https://www.tencentcloud.com/document/product/1145/62478;
+- `TypeVOD`: authentication method v type, for specific meaning please refer to authentication method v. https://www.tencentcloud.com/document/product/1145/62479.
+* `backup_secret_key` - (Optional, String) The backup authentication key consists of 6-40 uppercase and lowercase english letters or digits, and cannot contain " and $.
+* `secret_key` - (Optional, String) The primary authentication key consists of 6-40 uppercase and lowercase english letters or digits, and cannot contain " and $.
+* `time_format` - (Optional, String) Authentication time format. values: dec: decimal; hex: hexadecimal.
+* `time_param` - (Optional, String) Authentication timestamp. it cannot be the same as the value of the authparam field.note: this field is required when authtype is typed.
+* `timeout` - (Optional, Int) Validity period of the authentication url, in seconds, value range: 1-630720000. used to determine if the client access request has expired: If the current time exceeds "timestamp + validity period", it is an expired request, and a 403 is returned directly. If the current time does not exceed "timestamp + validity period", the request is not expired, and the md5 string is further validated. note: when authtype is one of typea, typeb, typec, or typed, this field is required.
+
+The `branches` object of `rules` supports the following:
+
+* `actions` - (Optional, List) Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.
+* `condition` - (Optional, String) Match condition. https://www.tencentcloud.com/document/product/1145/54759.
+* `sub_rules` - (Optional, List) List of sub-rules. multiple rules exist in this list and are executed sequentially from top to bottom. note: subrules and actions cannot both be empty. currently, only one layer of subrules is supported.
+
+The `branches` object of `sub_rules` supports the following:
+
+* `actions` - (Optional, List) Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.
+* `condition` - (Optional, String) Match condition. https://www.tencentcloud.com/document/product/1145/54759.
+
+The `branches` object of `sub_rules` supports the following:
+
+* `actions` - (Optional, List) Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.
+* `condition` - (Optional, String) Match condition. https://www.tencentcloud.com/document/product/1145/54759.
+* `sub_rules` - (Optional, List) List of sub-rules. multiple rules exist in this list and are executed sequentially from top to bottom. note: subrules and actions cannot both be empty. currently, only one layer of subrules is supported.
+
+The `cache_key_parameters` object of `actions` supports the following:
+
+* `cookie` - (Optional, List) Cookie configuration parameters. at least one of the following configurations must be set: fullurlcache, ignorecase, header, scheme, cookie.
+* `full_url_cache` - (Optional, String) Switch for retaining the complete query string. values: on: enable; off: disable.
+* `header` - (Optional, List) HTTP request header configuration parameters. at least one of the following configurations must be set: fullurlcache, ignorecase, header, scheme, cookie.
+* `ignore_case` - (Optional, String) Switch for ignoring case. values: enable; off: disable.note: at least one of fullurlcache, ignorecase, header, scheme, or cookie must be configured.
+* `query_string` - (Optional, List) Configuration parameter for retaining the query string. this field and fullurlcache must be set simultaneously, but cannot both be on.
+* `scheme` - (Optional, String) Request protocol switch. valid values: on: enable; off: disable.
+
+The `cache_parameters` object of `actions` supports the following:
+
+* `custom_time` - (Optional, List) Custom cache time. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.
+* `follow_origin` - (Optional, List) Cache follows origin server. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.
+* `no_cache` - (Optional, List) No cache. if not specified, this configuration is not set. only one of followorigin, nocache, or customtime can have switch set to on.
+
+The `cache_prefresh_parameters` object of `actions` supports the following:
+
+* `cache_time_percent` - (Optional, Int) Prefresh interval set as a percentage of the node cache time. value range: 1-99. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.
+* `switch` - (Optional, String) Whether to enable cache prefresh. values: enable; off: disable.
+
+The `client_ip_country_parameters` object of `actions` supports the following:
+
+* `header_name` - (Optional, String) Name of the request header that contains the client ip region. it is valid when switch=on. the default value eo-client-ipcountry is used when it is not specified.
+* `switch` - (Optional, String) Whether to enable configuration. values: on: enable; off: disable.
+
+The `client_ip_header_parameters` object of `actions` supports the following:
+
+* `header_name` - (Optional, String) Name of the request header containing the client ip address for origin-pull. when switch is on, this parameter is required. x-forwarded-for is not allowed for this parameter.
+* `switch` - (Optional, String) Whether to enable configuration. values: on: enable; off: disable.
+
+The `compression_parameters` object of `actions` supports the following:
+
+* `algorithms` - (Optional, List) Supported compression algorithm list. this field is required when switch is on; otherwise, it is not effective. valid values: brotli: brotli algorithm; gzip: gzip algorithm.
+* `switch` - (Optional, String) Whether to enable smart compression. values: on: enable; off: disable.
+
+The `cookie` object of `cache_key_parameters` supports the following:
+
+* `action` - (Optional, Int) Cache action. values: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters. note: when switch is on, this field is required. when switch is off, this field is not required and will not take effect if filled.
+* `switch` - (Optional, String) Whether to enable feature. values: on: enable; off: disable.
+* `values` - (Optional, List) Custom cache key cookie name list.
+
+The `cookie` object of `upstream_request_parameters` supports the following:
+
+* `action` - (Optional, Int) Origin-Pull request parameter cookie mode. this parameter is required when switch is on. valid values are: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters.
+* `switch` - (Optional, String) Whether to enable the origin-pull request parameter cookie. valid values: on: enable; off: disable.
+* `values` - (Optional, List) Specifies parameter values. this parameter takes effect only when the query string mode action is includecustom or excludecustom, and is used to specify the parameters to be reserved or ignored. up to 10 parameters are supported.
+
+The `custom_time` object of `cache_parameters` supports the following:
+
+* `cache_time` - (Optional, Int) Custom cache time value, unit: seconds. value range: 0-315360000.
+* `ignore_cache_control` - (Optional, String) Ignore origin server cachecontrol switch. values: `on`: Enable; `off`: Disable.
+* `switch` - (Optional, String) Custom cache time switch. values: `on`: Enable; `off`: Disable.
+
+The `error_page_parameters` object of `actions` supports the following:
+
+* `error_page_params` - (Optional, List) Custom error page configuration list.
+
+The `error_page_params` object of `error_page_parameters` supports the following:
+
+* `redirect_url` - (Required, String) Redirect url. requires a full redirect path, such as https://www.test.com/error.html.
+* `status_code` - (Required, Int) Status code. supported values are 400, 403, 404, 405, 414, 416, 451, 500, 501, 502, 503, 504.
+
+The `follow_origin` object of `cache_parameters` supports the following:
+
+* `switch` - (Required, String) Whether to enable the configuration of following the origin server. Valid values: `on`: Enable; `off`: Disable.
+* `default_cache_strategy` - (Optional, String) Whether to use the default caching policy when an origin server does not return the cache-control header. this field is required when defaultcache is set to on; otherwise, it is ineffective. when defaultcachetime is not 0, this field should be off. valid values: on: use the default caching policy. off: do not use the default caching policy.
+* `default_cache_time` - (Optional, Int) The default cache time in seconds when an origin server does not return the cache-control header. the value ranges from 0 to 315360000. this field is required when defaultcache is set to on; otherwise, it is ineffective. when defaultcachestrategy is on, this field should be 0.
+* `default_cache` - (Optional, String) Whether to cache when an origin server does not return the cache-control header. this field is required when switch is on; when switch is off, this field is not required and will be ineffective if filled. valid values: On: cache; Off: do not cache.
+
+The `force_redirect_https_parameters` object of `actions` supports the following:
+
+* `redirect_status_code` - (Optional, Int) Redirection status code. this field is required when switch is on; otherwise, it is not effective. valid values are: 301: 301 redirect; 302: 302 redirect.
+* `switch` - (Optional, String) Whether to enable forced redirect configuration switch. values: on: enable; off: disable.
+
+The `header_actions` object of `modify_request_header_parameters` supports the following:
+
+* `action` - (Required, String) HTTP header setting methods. valid values are: set: sets a value for an existing header parameter; del: deletes a header parameter; add: adds a header parameter.
+* `name` - (Required, String) HTTP header name.
+* `value` - (Optional, String) HTTP header value. this parameter is required when the action is set to set or add; it is optional when the action is set to del.
+
+The `header_actions` object of `modify_response_header_parameters` supports the following:
+
+* `action` - (Required, String) HTTP header setting methods. valid values are: set: sets a value for an existing header parameter; del: deletes a header parameter; add: adds a header parameter.
+* `name` - (Required, String) HTTP header name.
+* `value` - (Optional, String) HTTP header value. this parameter is required when the action is set to set or add; it is optional when the action is set to del.
+
+The `header` object of `cache_key_parameters` supports the following:
+
+* `switch` - (Optional, String) Whether to enable feature. values: on: enable; off: disable.
+* `values` - (Optional, List) Custom cache key http request header list. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.
+
+The `host_header_parameters` object of `actions` supports the following:
+
+* `action` - (Optional, String) Action to be executed. values: followOrigin: follow origin server domain name; custom: custom.
+* `server_name` - (Optional, String) Host header rewrite requires a complete domain name. note: this field is required when switch is on; when switch is off, this field is not required and any value will be ignored.
+
+The `host_name` object of `access_url_redirect_parameters` supports the following:
+
+* `action` - (Optional, String) Target hostname configuration, valid values are: follow: follow the request; custom: custom.
+* `value` - (Optional, String) Custom value for target hostname, maximum length is 1024.
+
+The `hsts_parameters` object of `actions` supports the following:
+
+* `include_sub_domains` - (Optional, String) Whether to allow other subdomains to inherit the same hsts header. values: on: allows other subdomains to inherit the same hsts header; off: does not allow other subdomains to inherit the same hsts header. note: when switch is on, this field is required; when switch is off, this field is not required and will not take effect if filled.
+* `preload` - (Optional, String) Whether to allow the browser to preload the hsts header. valid values: on: allows the browser to preload the hsts header; off: does not allow the browser to preload the hsts header. note: when switch is on, this field is required; when switch is off, this field is not required and will not take effect if filled.
+* `switch` - (Optional, String) Whether to enable hsts. values: on: enable; off: disable.
+* `timeout` - (Optional, Int) Cache hsts header time, unit: seconds. value range: 1-31536000. note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.
+
+The `http2_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable http2 access. values: on: enable; off: disable.
+
+The `http_response_parameters` object of `actions` supports the following:
+
+* `response_page` - (Optional, String) Response page id.
+* `status_code` - (Optional, Int) Response status code. supports 2xx, 4xx, 5xx, excluding 499, 514, 101, 301, 302, 303, 509, 520-599.
+
+The `http_upstream_timeout_parameters` object of `actions` supports the following:
+
+* `response_timeout` - (Optional, Int) HTTP response timeout in seconds. value range: 5-600.
+
+The `max_age_parameters` object of `actions` supports the following:
+
+* `cache_time` - (Optional, Int) Custom cache time value, unit: seconds. value range: 0-315360000. note: when followorigin is off, it means not following the origin server and using cachetime to set the cache time; otherwise, this field will not take effect.
+* `follow_origin` - (Optional, String) Specifies whether to follow the origin server cache-control configuration, with the following values: on: follow the origin server and ignore the field cachetime; off: do not follow the origin server and apply the field cachetime.
+
+The `modify_origin_parameters` object of `actions` supports the following:
+
+* `http_origin_port` - (Optional, Int) Ports for http origin-pull requests. value range: 1-65535. this parameter takes effect only when the origin-pull protocol originprotocol is http or follow.
+* `https_origin_port` - (Optional, Int) Ports for https origin-pull requests. value range: 1-65535. this parameter takes effect only when the origin-pull protocol originprotocol is https or follow.
+* `origin_protocol` - (Optional, String) Origin-Pull protocol configuration. this parameter is required when origintype is ipdomain, origingroup, or loadbalance. valid values are: Http: use http protocol; Https: use https protocol; Follow: follow the protocol.
+* `origin_type` - (Optional, String) The origin type. values: IPDomain: ipv4, ipv6, or domain name type origin server; OriginGroup: origin server group type origin server; LoadBalance: cloud load balancer (clb), this feature is in beta test. to use it, please submit a ticket or contact smart customer service; COS: tencent cloud COS origin server; AWSS3: all object storage origin servers that support the aws s3 protocol.
+* `origin` - (Optional, String) Origin server address, which varies according to the value of origintype: When origintype = ipdomain, fill in an ipv4 address, an ipv6 address, or a domain name; When origintype = cos, please fill in the access domain name of the cos bucket; When origintype = awss3, fill in the access domain name of the s3 bucket; When origintype = origingroup, fill in the origin server group id; When origintype = loadbalance, fill in the cloud load balancer instance id. this feature is currently only available to the allowlist.
+* `private_access` - (Optional, Int) Whether access to the private object storage origin server is allowed. this parameter is valid only when the origin server type origintype is COS or awss3. valid values: on: enable private authentication; off: disable private authentication. if not specified, the default value is off.
+* `private_parameters` - (Optional, List) Private authentication parameter. this parameter is valid only when origintype = awss3 and privateaccess = on.
+
+The `modify_request_header_parameters` object of `actions` supports the following:
+
+* `header_actions` - (Optional, List) List of http header setting rules.
+
+The `modify_response_header_parameters` object of `actions` supports the following:
+
+* `header_actions` - (Optional, List) HTTP origin-pull header rules list.
+
+The `no_cache` object of `cache_parameters` supports the following:
+
+* `switch` - (Required, String) Whether to enable no-cache configuration. Valid values: `on`: Enable; `off`: Disable.
+
+The `ocsp_stapling_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable ocsp stapling configuration switch. values: on: enable; off: disable.
+
+The `offline_cache_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable offline caching. values: on: enable; Off: disable.
+
+The `post_max_size_parameters` object of `actions` supports the following:
+
+* `max_size` - (Optional, Int) Maximum size of the file uploaded for streaming via a post request, in bytes. value range: 1 * 2^20 bytes to 500 * 2^20 bytes.
+* `switch` - (Optional, String) Whether to enable post request file upload limit, in bytes (default limit: 32 * 2^20 bytes). valid values: on: enable limit; off: disable limit.
+
+The `private_parameters` object of `modify_origin_parameters` supports the following:
+
+* `access_key_id` - (Required, String) Authentication parameter access key id.
+* `secret_access_key` - (Required, String) Authentication parameter secret access key.
+* `signature_version` - (Required, String) Authentication version. values: v2: v2 version; v4: v4 version.
+* `region` - (Optional, String) Region of the bucket.
+
+The `query_string` object of `access_url_redirect_parameters` supports the following:
+
+* `action` - (Optional, String) Action to be executed. values: full: retain all; ignore: ignore all.
+
+The `query_string` object of `cache_key_parameters` supports the following:
+
+* `action` - (Optional, String) Actions to retain/ignore specified parameters in the query string. values: `includeCustom`: retain partial parameters. `excludeCustom`: ignore partial parameters.note: this field is required when switch is on. when switch is off, this field is not required and will not take effect if filled.
+* `switch` - (Optional, String) Query string retain/ignore specified parameter switch. valid values are: on: enable; off: disable.
+* `values` - (Optional, List) A list of parameter names to keep/ignore in the query string.
+
+The `query_string` object of `upstream_request_parameters` supports the following:
+
+* `action` - (Optional, Int) Query string mode. this parameter is required when switch is on. values: full: retain all; ignore: ignore all; includeCustom: retain partial parameters; excludeCustom: ignore partial parameters.
+* `switch` - (Optional, String) Whether to enable origin-pull request parameter query string. values: on: enable; off: disable.
+* `values` - (Optional, List) Specifies parameter values. this parameter takes effect only when the query string mode action is includecustom or excludecustom, and is used to specify the parameters to be reserved or ignored. up to 10 parameters are supported.
+
+The `quic_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable quic. values: on: enable; off: disable.
+
+The `range_origin_pull_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable range gets. values are: on: enable; Off: disable.
+
+The `response_speed_limit_parameters` object of `actions` supports the following:
+
+* `max_speed` - (Required, String) Rate-Limiting value, in kb/s. enter a numerical value to specify the rate limit.
+* `mode` - (Required, String) Download rate limit mode. valid values: LimitUponDownload: rate limit throughout the download process; LimitAfterSpecificBytesDownloaded: rate limit after downloading specific bytes at full speed; LimitAfterSpecificSecondsDownloaded: start speed limit after downloading at full speed for a specific duration.
+* `start_at` - (Optional, String) Rate-Limiting start value, which can be the download size or specified duration, in kb or s. this parameter is required when mode is set to limitafterspecificbytesdownloaded or limitafterspecificsecondsdownloaded. enter a numerical value to specify the download size or duration.
+
+The `rules` object supports the following:
+
+* `branches` - (Optional, List) Sub-Rule branch. this list currently supports filling in only one rule; multiple entries are invalid.
+* `description` - (Optional, List) Rule annotation. multiple annotations can be added.
+* `rule_name` - (Optional, String) Rule name. The name length limit is 255 characters.
+* `status` - (Optional, String) Rule status. The possible values are: `enable`: enabled; `disable`: disabled.
+
+The `set_content_identifier_parameters` object of `actions` supports the following:
+
+* `content_identifier` - (Optional, String) Content identifier id.
+
+The `smart_routing_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable smart acceleration. values: on: enable; Off: disable.
+
+The `status_code_cache_parameters` object of `actions` supports the following:
+
+* `status_code_cache_params` - (Optional, List) Status code cache ttl.
+
+The `status_code_cache_params` object of `status_code_cache_parameters` supports the following:
+
+* `cache_time` - (Optional, Int) Cache time value in seconds. value range: 0-31536000.
+* `status_code` - (Optional, Int) Status code. valid values: 400, 401, 403, 404, 405, 407, 414, 500, 501, 502, 503, 504, 509, 514.
+
+The `sub_rules` object of `branches` supports the following:
+
+* `branches` - (Optional, List) Sub-rule branch.
+* `description` - (Optional, List) Rule comments.
+
+The `tls_config_parameters` object of `actions` supports the following:
+
+* `cipher_suite` - (Optional, String) Cipher suite. for detailed information, please refer to tls versions and cipher suites description, https://www.tencentcloud.com/document/product/1145/54154?has_map=1. valid values: loose-v2023: loose-v2023 cipher suite; general-v2023: general-v2023 cipher suite; strict-v2023: strict-v2023 cipher suite.
+* `version` - (Optional, String) TLS version. at least one must be specified. if multiple versions are specified, they must be consecutive, e.g., enable tls1, 1.1, 1.2, and 1.3. it is not allowed to enable only 1 and 1.2 while disabling 1.1. valid values: tlsv1: tlsv1 version; `tlsv1.1`: tlsv1.1 version; `tlsv1.2`: tlsv1.2 version; `tlsv1.3`: tlsv1.3 version.
+
+The `upstream_follow_redirect_parameters` object of `actions` supports the following:
+
+* `max_times` - (Optional, Int) The maximum number of redirects. value range: 1-5. Note: this field is required when switch is on; when switch is off, this field is not required and will not take effect if filled.
+* `switch` - (Optional, String) Whether to enable origin-pull to follow the redirection configuration. values: on: enable; off: disable.
+
+The `upstream_http2_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable http2 origin-pull. valid values: on: enable; off: disable.
+
+The `upstream_request_parameters` object of `actions` supports the following:
+
+* `cookie` - (Optional, List) Cookie configuration. optional. if not provided, it will not be configured.
+* `query_string` - (Optional, List) Query string configuration. optional. if not provided, it will not be configured.
+
+The `upstream_url_rewrite_parameters` object of `actions` supports the following:
+
+* `action` - (Optional, String) Origin-Pull url rewrite action. valid values are: replace: replace the path prefix; addPrefix: add the path prefix; rmvPrefix: remove the path prefix.
+* `type` - (Optional, String) Origin-Pull url rewriting type, only path is supported.
+* `value` - (Optional, String) Origin-Pull url rewrite value, maximum length 1024, must start with /.note: when action is addprefix, it cannot end with /; when action is rmvprefix, * cannot be present.
+
+The `url_path` object of `access_url_redirect_parameters` supports the following:
+
+* `action` - (Optional, String) Action to be executed. values: follow: follow the request; custom: custom; regex: regular expression matching.
+* `regex` - (Optional, String) Regular expression matching expression, length range is 1-1024. note: when action is regex, this field is required; when action is follow or custom, this field is not required and will not take effect if filled.
+* `value` - (Optional, String) Redirect target url, length range is 1-1024.note: when action is regex or custom, this field is required; when action is follow, this field is not required and will not take effect if filled.
+
+The `web_socket_parameters` object of `actions` supports the following:
+
+* `switch` - (Optional, String) Whether to enable websocket connection timeout. values: on: use timeout as the websocket timeout;; off: the platform still supports websocket connections, using the system default timeout of 15 seconds.
+* `timeout` - (Optional, Int) Timeout, unit: seconds. maximum timeout is 120 seconds.
+
+## Attributes Reference
+
+In addition to all arguments above, the following attributes are exported:
+
+* `id` - ID of the resource.
+
+
+
+## Import
+
+teo l7_acc_rule can be imported using the zone_id, e.g.
+````
+terraform import tencentcloud_teo_l7_acc_rule.teo_l7_acc_rule zone-297z8rf93cfw
+````
+
diff --git a/website/docs/r/teo_rule_engine.html.markdown b/website/docs/r/teo_rule_engine.html.markdown
index 2d874b4a1f..70a2273896 100644
--- a/website/docs/r/teo_rule_engine.html.markdown
+++ b/website/docs/r/teo_rule_engine.html.markdown
@@ -11,6 +11,8 @@ description: |-
Provides a resource to create a teo rule_engine
+~> **NOTE:** The current resource has been deprecated, please use `tencentcloud_teo_l7_acc_rule`.
+
## Example Usage
```hcl
diff --git a/website/tencentcloud.erb b/website/tencentcloud.erb
index d47e40dcaa..0911685033 100644
--- a/website/tencentcloud.erb
+++ b/website/tencentcloud.erb
@@ -5236,6 +5236,9 @@
tencentcloud_teo_l4_proxy_rule
+
+ tencentcloud_teo_l7_acc_rule
+
tencentcloud_teo_l7_acc_setting