InfraProposedRulesRequest

InfraProposedRulesRequest
Infrastructure Proposed DFW Rules Request

Request object for generating DFW rule proposals for infrastructure services.

Default behaviour when hierarchy_requests is omitted or empty: traffic rules are proposed for the global scope (source ANY to infrastructure service group). To also include lockdown rules, set lockdown_rule_request to true. To suppress traffic rules explicitly, include a global hierarchy_requests entry with traffic set to false.

When hierarchy_requests is provided, each entry controls traffic for its own hierarchy scope; lockdown_rule_request continues to apply globally across all entries.

JSON Example 
{
    "site_id": "0c7d7379-3ac5-41e0-9a97-5daf80ccde17",
    "lockdown_rule_request": true,
    "hierarchy_requests": [
        {
            "hierarchy": [],
            "traffic": true
        }
    ]
}
string
site_id
Required  

Site identifier for the proposed rules

string
infra_policy_path
Optional

Path of the infrastructure policy path where the rules will be proposed. This section or policy must exist on the NSX manager.

array of InfraProposedRulesPerHierarchyRequest
hierarchy_requests
Optional
Constraints: minItems: 0 maxItems: 100

Optional array of requests, one per hierarchical group. Each entry specifies the segmentation realization object (hierarchy path) and whether to propose traffic rules for that hierarchy. When omitted or empty, a single implicit global entry is used with traffic defaulting to true. To suppress traffic for global scope, include one entry with hierarchy null or empty and traffic false.

boolean
lockdown_rule_request
Optional

Whether to propose a lockdown (deny) rule for the infrastructure service category. Applies globally across all hierarchy entries. Defaults to false.

Parameter To