public static final class CreateSslVpnServerRequest.Builder extends Object
限定符和类型 | 方法和说明 |
---|---|
CreateSslVpnServerRequest |
build() |
CreateSslVpnServerRequest.Builder |
cipher(String cipher)
The encryption algorithm that is used by the SSL-VPN connection.
|
CreateSslVpnServerRequest.Builder |
clientIpPool(String clientIpPool)
The client CIDR block.
|
CreateSslVpnServerRequest.Builder |
clientToken(String clientToken)
The client token that is used to ensure the idempotence of the request.
|
CreateSslVpnServerRequest.Builder |
compress(Boolean compress)
Specifies whether to enable data compression.
|
CreateSslVpnServerRequest.Builder |
enableMultiFactorAuth(Boolean enableMultiFactorAuth)
Specifies whether to enable two-factor authentication.
|
CreateSslVpnServerRequest.Builder |
iDaaSApplicationId(String iDaaSApplicationId)
IDaaSApplicationId.
|
CreateSslVpnServerRequest.Builder |
iDaaSInstanceId(String iDaaSInstanceId)
The Identity as a Service (IDaaS) instance ID.
|
CreateSslVpnServerRequest.Builder |
iDaaSRegionId(String iDaaSRegionId)
The ID of the region where the IDaaS instance is created.
|
CreateSslVpnServerRequest.Builder |
localSubnet(String localSubnet)
The local CIDR block.
|
CreateSslVpnServerRequest.Builder |
name(String name)
The SSL server name.
|
CreateSslVpnServerRequest.Builder |
ownerAccount(String ownerAccount)
OwnerAccount.
|
CreateSslVpnServerRequest.Builder |
ownerId(Long ownerId)
OwnerId.
|
CreateSslVpnServerRequest.Builder |
port(Integer port)
The port that is used by the SSL server.
|
CreateSslVpnServerRequest.Builder |
proto(String proto)
The protocol that is used by the SSL server.
|
CreateSslVpnServerRequest.Builder |
regionId(String regionId)
The region ID of the VPN gateway.
|
CreateSslVpnServerRequest.Builder |
resourceOwnerAccount(String resourceOwnerAccount)
ResourceOwnerAccount.
|
CreateSslVpnServerRequest.Builder |
resourceOwnerId(Long resourceOwnerId)
ResourceOwnerId.
|
CreateSslVpnServerRequest.Builder |
vpnGatewayId(String vpnGatewayId)
The ID of the VPN gateway.
|
public CreateSslVpnServerRequest.Builder cipher(String cipher)
* If the client uses Tunnelblick or OpenVPN 2.4.0 or later, the SSL server dynamically negotiates with the client about the encryption algorithm and uses the most secure encryption algorithm that is supported by the SSL server and the client. The encryption algorithm that you specify for the SSL server does not take effect. * If the client uses OpenVPN of a version that is earlier than 2.4.0, the SSL server and the client use the encryption algorithm that you specify for the SSL server. You can specify one of the following encryption algorithms for the SSL server: * **AES-128-CBC** (default) * **AES-192-CBC** * **AES-256-CBC** * **none**
public CreateSslVpnServerRequest.Builder clientIpPool(String clientIpPool)
It is the CIDR block from which an IP address is allocated to the virtual network interface controller (NIC) of the client. It is not the private CIDR block of the client.
If the client accesses the SSL server over an SSL-VPN connection, the VPN gateway assigns an IP address from the specified client CIDR block to the client. The client uses the assigned IP address to access cloud resources.
Make sure that the number of IP addresses in the client CIDR block is at least four times the maximum number of SSL-VPN connections supported by the VPN gateway.
Click to view the reason.
For example, if you specify 192.168.0.0/24 as the client CIDR block, the system first divides a subnet CIDR block with a subnet mask of 30 from 192.168.0.0/24, such as 192.168.0.4/30. This subnet provides up to four IP addresses. Then, the system allocates an IP address from 192.168.0.4/30 to the client and uses the other three IP addresses to ensure network communication. In this case, one client consumes four IP addresses. Therefore, to ensure that an IP address is assigned to your client, you must make sure that the number of IP addresses in the client CIDR block is at least four times the maximum number of SSL-VPN connections supported by the VPN gateway with which the SSL server is associated.
Click to view the CIDR blocks that are not supported.
* 100.64.0.0~100.127.255.255
* 127.0.0.0~127.255.255.255
* 169.254.0.0~169.254.255.255
* 224.0.0.0~239.255.255.255
* 255.0.0.0~255.255.255.255
Click to view the recommended client CIDR blocks for different numbers of SSL-VPN connections.
* If the number of SSL-VPN connections is 5, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 27 bits in length. Examples: 10.0.0.0/27 and 10.0.0.0/26.
* If the number of SSL-VPN connections is 10, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 26 bits in length. Examples: 10.0.0.0/26 and 10.0.0.0/25.
* If the number of SSL-VPN connections is 20, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 25 bits in length. Examples: 10.0.0.0/25 and 10.0.0.0/24.
* If the number of SSL-VPN connections is 50, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 24 bits in length. Examples: 10.0.0.0/24 and 10.0.0.0/23.
* If the number of SSL-VPN connections is 100, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 23 bits in length. Examples: 10.0.0.0/23 and 10.0.0.0/22.
* If the number of SSL-VPN connections is 200, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 22 bits in length. Examples: 10.0.0.0/22 and 10.0.0.0/21.
* If the number of SSL-VPN connections is 500, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 21 bits in length. Examples: 10.0.0.0/21 and 10.0.0.0/20.
* If the number of SSL-VPN connections is 1,000, we recommend that you specify a client CIDR block with a subnet mask that is less than or equal to 20 bits in length. Examples: 10.0.0.0/20 and 10.0.0.0/19.
public CreateSslVpnServerRequest.Builder clientToken(String clientToken)
You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters. > If you do not specify this parameter, the system automatically uses the **request ID** as the **client token**. The **request ID** may be different for each request.
public CreateSslVpnServerRequest.Builder compress(Boolean compress)
* **true** * **false** (default)
public CreateSslVpnServerRequest.Builder enableMultiFactorAuth(Boolean enableMultiFactorAuth)
* **true**: enables this feature. * **false** (default): disables this feature. > - Two-factor authentication supports only earlier versions of IDaaS instances. If you do not have and cannot create earlier versions of IDaaS instances, you cannot enable two-factor authentication. > - If two-factor authentication is already enabled for existing SSL servers, you can continue to use two-factor authentication.
public CreateSslVpnServerRequest.Builder iDaaSApplicationId(String iDaaSApplicationId)
public CreateSslVpnServerRequest.Builder iDaaSInstanceId(String iDaaSInstanceId)
public CreateSslVpnServerRequest.Builder iDaaSRegionId(String iDaaSRegionId)
public CreateSslVpnServerRequest.Builder localSubnet(String localSubnet)
It is the CIDR block that your client needs to access by using the SSL-VPN connection. This value can be the CIDR block of a VPC, a vSwitch, a data center that is connected to a VPC by using an Express Connect circuit, or an Alibaba Cloud service such as Object Storage Service (OSS). The subnet mask of the specified local CIDR block must be 8 to 32 bits in length. You cannot specify the following CIDR blocks as the local CIDR blocks: * 100.64.0.0~100.127.255.255 * 127.0.0.0~127.255.255.255 * 169.254.0.0~169.254.255.255 * 224.0.0.0~239.255.255.255 * 255.0.0.0~255.255.255.255
public CreateSslVpnServerRequest.Builder name(String name)
The name must be 1 to 100 characters in length and cannot start with `http://` or `https://`.
public CreateSslVpnServerRequest.Builder ownerAccount(String ownerAccount)
public CreateSslVpnServerRequest.Builder ownerId(Long ownerId)
public CreateSslVpnServerRequest.Builder port(Integer port)
The following ports are not supported: **22**, **2222**, **22222**, **9000**, **9001**, **9002**, **7505**, **80**, **443**, **53**, **68**, **123**, **4510**, **4560**, **500**, and **4500**.
public CreateSslVpnServerRequest.Builder proto(String proto)
* **TCP** (default) * **UDP**
public CreateSslVpnServerRequest.Builder regionId(String regionId)
You can call the [DescribeRegions](~~36063~~) operation to query the most recent region list.
public CreateSslVpnServerRequest.Builder resourceOwnerAccount(String resourceOwnerAccount)
public CreateSslVpnServerRequest.Builder resourceOwnerId(Long resourceOwnerId)
public CreateSslVpnServerRequest.Builder vpnGatewayId(String vpnGatewayId)
public CreateSslVpnServerRequest build()
Copyright © 2024. All rights reserved.