Dns
Example Usage
resources:
exampleDnsFirewall:
type: cloudflare:DnsFirewall
name: example_dns_firewall
properties:
accountId: 023e105f4ecef8ad9ca31a8372d0c353
name: My Awesome DNS Firewall cluster
upstreamIps:
- 192.0.2.1
- 198.51.100.1
- 2001:DB8:100::CF
attackMitigation:
enabled: true
only_when_upstream_unhealthy: false
deprecateAnyRequests: true
ecsFallback: false
maximumCacheTtl: 900
minimumCacheTtl: 60
negativeCacheTtl: 900
ratelimit: 600
retries: 2Import
$ pulumi import cloudflare:index/dnsFirewall:DnsFirewall example '<account_id>/<dns_firewall_id>'Properties
Attack mitigation settings
Whether to refuse to answer queries for the ANY type
Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
Maximum DNS cache TTL This setting sets an upper bound on DNS TTLs for purposes of caching between DNS Firewall and the upstream servers. Higher TTLs will be decreased to the maximum defined here for caching purposes.
Minimum DNS cache TTL This setting sets a lower bound on DNS TTLs for purposes of caching between DNS Firewall and the upstream servers. Lower TTLs will be increased to the minimum defined here for caching purposes.
Last modification of DNS Firewall cluster
Negative DNS cache TTL This setting controls how long DNS Firewall should cache negative responses (e.g., NXDOMAIN) from the upstream servers.