1. Packages
  2. Oracle Cloud Infrastructure
  3. API Docs
  4. NetworkFirewall
  5. getNetworkFirewallPolicyTunnelInspectionRules
Oracle Cloud Infrastructure v3.11.1 published on Friday, Nov 14, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

oci.NetworkFirewall.getNetworkFirewallPolicyTunnelInspectionRules

oci logo
Oracle Cloud Infrastructure v3.11.1 published on Friday, Nov 14, 2025 by Pulumi
Schema (JSON)
pulumi/pulumi-oci

    This data source provides the list of Network Firewall Policy Tunnel Inspection Rules in Oracle Cloud Infrastructure Network Firewall service.

    Returns a list of tunnel inspection rules for the network firewall policy.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as oci from "@pulumi/oci";

const testNetworkFirewallPolicyTunnelInspectionRules = oci.NetworkFirewall.getNetworkFirewallPolicyTunnelInspectionRules({
    networkFirewallPolicyId: testNetworkFirewallPolicy.id,
    displayName: networkFirewallPolicyTunnelInspectionRuleDisplayName,
    tunnelInspectionRulePriorityOrder: networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder,
});

    import pulumi
import pulumi_oci as oci

test_network_firewall_policy_tunnel_inspection_rules = oci.NetworkFirewall.get_network_firewall_policy_tunnel_inspection_rules(network_firewall_policy_id=test_network_firewall_policy["id"],
    display_name=network_firewall_policy_tunnel_inspection_rule_display_name,
    tunnel_inspection_rule_priority_order=network_firewall_policy_tunnel_inspection_rule_tunnel_inspection_rule_priority_order)

    package main

import (
	"github.com/pulumi/pulumi-oci/sdk/v3/go/oci/networkfirewall"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRules(ctx, &networkfirewall.GetNetworkFirewallPolicyTunnelInspectionRulesArgs{
			NetworkFirewallPolicyId:           testNetworkFirewallPolicy.Id,
			DisplayName:                       pulumi.StringRef(networkFirewallPolicyTunnelInspectionRuleDisplayName),
			TunnelInspectionRulePriorityOrder: pulumi.IntRef(networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Oci = Pulumi.Oci;

return await Deployment.RunAsync(() => 
{
    var testNetworkFirewallPolicyTunnelInspectionRules = Oci.NetworkFirewall.GetNetworkFirewallPolicyTunnelInspectionRules.Invoke(new()
    {
        NetworkFirewallPolicyId = testNetworkFirewallPolicy.Id,
        DisplayName = networkFirewallPolicyTunnelInspectionRuleDisplayName,
        TunnelInspectionRulePriorityOrder = networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder,
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.oci.NetworkFirewall.NetworkFirewallFunctions;
import com.pulumi.oci.NetworkFirewall.inputs.GetNetworkFirewallPolicyTunnelInspectionRulesArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var testNetworkFirewallPolicyTunnelInspectionRules = NetworkFirewallFunctions.getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs.builder()
            .networkFirewallPolicyId(testNetworkFirewallPolicy.id())
            .displayName(networkFirewallPolicyTunnelInspectionRuleDisplayName)
            .tunnelInspectionRulePriorityOrder(networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder)
            .build());

    }
}

    variables:
  testNetworkFirewallPolicyTunnelInspectionRules:
    fn::invoke:
      function: oci:NetworkFirewall:getNetworkFirewallPolicyTunnelInspectionRules
      arguments:
        networkFirewallPolicyId: ${testNetworkFirewallPolicy.id}
        displayName: ${networkFirewallPolicyTunnelInspectionRuleDisplayName}
        tunnelInspectionRulePriorityOrder: ${networkFirewallPolicyTunnelInspectionRuleTunnelInspectionRulePriorityOrder}

    Using getNetworkFirewallPolicyTunnelInspectionRules

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getNetworkFirewallPolicyTunnelInspectionRules(args: GetNetworkFirewallPolicyTunnelInspectionRulesArgs, opts?: InvokeOptions): Promise<GetNetworkFirewallPolicyTunnelInspectionRulesResult>
function getNetworkFirewallPolicyTunnelInspectionRulesOutput(args: GetNetworkFirewallPolicyTunnelInspectionRulesOutputArgs, opts?: InvokeOptions): Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult>
    def get_network_firewall_policy_tunnel_inspection_rules(display_name: Optional[str] = None,
                                                        filters: Optional[Sequence[GetNetworkFirewallPolicyTunnelInspectionRulesFilter]] = None,
                                                        network_firewall_policy_id: Optional[str] = None,
                                                        tunnel_inspection_rule_priority_order: Optional[int] = None,
                                                        opts: Optional[InvokeOptions] = None) -> GetNetworkFirewallPolicyTunnelInspectionRulesResult
def get_network_firewall_policy_tunnel_inspection_rules_output(display_name: Optional[pulumi.Input[str]] = None,
                                                        filters: Optional[pulumi.Input[Sequence[pulumi.Input[GetNetworkFirewallPolicyTunnelInspectionRulesFilterArgs]]]] = None,
                                                        network_firewall_policy_id: Optional[pulumi.Input[str]] = None,
                                                        tunnel_inspection_rule_priority_order: Optional[pulumi.Input[int]] = None,
                                                        opts: Optional[InvokeOptions] = None) -> Output[GetNetworkFirewallPolicyTunnelInspectionRulesResult]
    func GetNetworkFirewallPolicyTunnelInspectionRules(ctx *Context, args *GetNetworkFirewallPolicyTunnelInspectionRulesArgs, opts ...InvokeOption) (*GetNetworkFirewallPolicyTunnelInspectionRulesResult, error)
func GetNetworkFirewallPolicyTunnelInspectionRulesOutput(ctx *Context, args *GetNetworkFirewallPolicyTunnelInspectionRulesOutputArgs, opts ...InvokeOption) GetNetworkFirewallPolicyTunnelInspectionRulesResultOutput

    > Note: This function is named GetNetworkFirewallPolicyTunnelInspectionRules in the Go SDK.

    public static class GetNetworkFirewallPolicyTunnelInspectionRules 
{
    public static Task<GetNetworkFirewallPolicyTunnelInspectionRulesResult> InvokeAsync(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions? opts = null)
    public static Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult> Invoke(GetNetworkFirewallPolicyTunnelInspectionRulesInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetNetworkFirewallPolicyTunnelInspectionRulesResult> getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions options)
public static Output<GetNetworkFirewallPolicyTunnelInspectionRulesResult> getNetworkFirewallPolicyTunnelInspectionRules(GetNetworkFirewallPolicyTunnelInspectionRulesArgs args, InvokeOptions options)

    fn::invoke:
  function: oci:NetworkFirewall/getNetworkFirewallPolicyTunnelInspectionRules:getNetworkFirewallPolicyTunnelInspectionRules
  arguments:
    # arguments dictionary

    The following arguments are supported:

    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DisplayName string
    A filter to return only resources that match the entire display name given.
    Filters List<GetNetworkFirewallPolicyTunnelInspectionRulesFilter>
    TunnelInspectionRulePriorityOrder int
    Unique priority order for Tunnel Inspection rules in the network firewall policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    DisplayName string
    A filter to return only resources that match the entire display name given.
    Filters []GetNetworkFirewallPolicyTunnelInspectionRulesFilter
    TunnelInspectionRulePriorityOrder int
    Unique priority order for Tunnel Inspection rules in the network firewall policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    displayName String
    A filter to return only resources that match the entire display name given.
    filters List<GetPolicyTunnelInspectionRulesFilter>
    tunnelInspectionRulePriorityOrder Integer
    Unique priority order for Tunnel Inspection rules in the network firewall policy.
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    displayName string
    A filter to return only resources that match the entire display name given.
    filters GetNetworkFirewallPolicyTunnelInspectionRulesFilter[]
    tunnelInspectionRulePriorityOrder number
    Unique priority order for Tunnel Inspection rules in the network firewall policy.
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    display_name str
    A filter to return only resources that match the entire display name given.
    filters Sequence[GetNetworkFirewallPolicyTunnelInspectionRulesFilter]
    tunnel_inspection_rule_priority_order int
    Unique priority order for Tunnel Inspection rules in the network firewall policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    displayName String
    A filter to return only resources that match the entire display name given.
    filters List<Property Map>
    tunnelInspectionRulePriorityOrder Number
    Unique priority order for Tunnel Inspection rules in the network firewall policy.

    getNetworkFirewallPolicyTunnelInspectionRules Result

    The following output properties are available:

    id String
    The provider-assigned unique ID for this managed resource.
    networkFirewallPolicyId String
    tunnelInspectionRuleSummaryCollections List<Property Map>
    The list of tunnel_inspection_rule_summary_collection.
    displayName String
    filters List<Property Map>
    tunnelInspectionRulePriorityOrder Number

    Supporting Types

    GetNetworkFirewallPolicyTunnelInspectionRulesFilter

    Name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    Values List<string>
    Regex bool
    Name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    Values []string
    Regex bool
    name String
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    values List<String>
    regex Boolean
    name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    values string[]
    regex boolean
    name str
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    values Sequence[str]
    regex bool
    name String
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    values List<String>
    regex Boolean

    GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollection

    GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItem

    Action string
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    Condition GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    Name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    Position GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    PriorityOrder string
    The priority order in which this rule should be evaluated
    Profile GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    Protocol string
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
    Action string
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    Condition GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    Name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    NetworkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    ParentResourceId string
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    Position GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    PriorityOrder string
    The priority order in which this rule should be evaluated
    Profile GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    Protocol string
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
    action String
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    condition GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    name String
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    position GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    priorityOrder String
    The priority order in which this rule should be evaluated
    profile GetPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    protocol String
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
    action string
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    condition GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    name string
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    networkFirewallPolicyId string
    Unique Network Firewall Policy identifier
    parentResourceId string
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    position GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    priorityOrder string
    The priority order in which this rule should be evaluated
    profile GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    protocol string
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
    action str
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    condition GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    name str
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    network_firewall_policy_id str
    Unique Network Firewall Policy identifier
    parent_resource_id str
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    position GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition
    An object which defines the position of the rule.
    priority_order str
    The priority order in which this rule should be evaluated
    profile GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    protocol str
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.
    action String
    Types of Inspect Action on the Traffic flow.

    • INSPECT - Inspect the traffic.
    • INSPECT_AND_CAPTURE_LOG - Inspect and capture logs for the traffic.
    condition Property Map
    Criteria to evaluate against incoming network traffic. A match occurs when at least one item in the array associated with each specified property corresponds with the relevant aspect of the traffic.
    name String
    Name for the Tunnel Inspection Rule, must be unique within the policy.
    networkFirewallPolicyId String
    Unique Network Firewall Policy identifier
    parentResourceId String
    OCID of the Network Firewall Policy this Tunnel Inspection Rule belongs to.
    position Property Map
    An object which defines the position of the rule.
    priorityOrder String
    The priority order in which this rule should be evaluated
    profile Property Map
    Vxlan Inspect profile used in Vxlan Tunnel Inspection Rules.
    protocol String
    Types of Tunnel Inspection Protocol to be applied on the traffic.

    • VXLAN - VXLAN Tunnel Inspection Protocol will be applied on the traffic.

    GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemCondition

    DestinationAddresses List<string>
    An array of address list names to be evaluated against the traffic destination address.
    SourceAddresses List<string>
    An array of address list names to be evaluated against the traffic source address.
    DestinationAddresses []string
    An array of address list names to be evaluated against the traffic destination address.
    SourceAddresses []string
    An array of address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    An array of address list names to be evaluated against the traffic source address.
    destinationAddresses string[]
    An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses string[]
    An array of address list names to be evaluated against the traffic source address.
    destination_addresses Sequence[str]
    An array of address list names to be evaluated against the traffic destination address.
    source_addresses Sequence[str]
    An array of address list names to be evaluated against the traffic source address.
    destinationAddresses List<String>
    An array of address list names to be evaluated against the traffic destination address.
    sourceAddresses List<String>
    An array of address list names to be evaluated against the traffic source address.

    GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemPosition

    AfterRule string
    Identifier for rule after which this rule lies.
    BeforeRule string
    Identifier for rule before which this rule lies.
    AfterRule string
    Identifier for rule after which this rule lies.
    BeforeRule string
    Identifier for rule before which this rule lies.
    afterRule String
    Identifier for rule after which this rule lies.
    beforeRule String
    Identifier for rule before which this rule lies.
    afterRule string
    Identifier for rule after which this rule lies.
    beforeRule string
    Identifier for rule before which this rule lies.
    after_rule str
    Identifier for rule after which this rule lies.
    before_rule str
    Identifier for rule before which this rule lies.
    afterRule String
    Identifier for rule after which this rule lies.
    beforeRule String
    Identifier for rule before which this rule lies.

    GetNetworkFirewallPolicyTunnelInspectionRulesTunnelInspectionRuleSummaryCollectionItemProfile

    MustReturnTrafficToSource bool
    Return scanned VXLAN tunnel traffic to source.
    MustReturnTrafficToSource bool
    Return scanned VXLAN tunnel traffic to source.
    mustReturnTrafficToSource Boolean
    Return scanned VXLAN tunnel traffic to source.
    mustReturnTrafficToSource boolean
    Return scanned VXLAN tunnel traffic to source.
    must_return_traffic_to_source bool
    Return scanned VXLAN tunnel traffic to source.
    mustReturnTrafficToSource Boolean
    Return scanned VXLAN tunnel traffic to source.

    Package Details

    Repository
    oci pulumi/pulumi-oci
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the oci Terraform Provider.
    oci logo
    Oracle Cloud Infrastructure v3.11.1 published on Friday, Nov 14, 2025 by Pulumi
    Schema (JSON)
    pulumi/pulumi-oci
      Meet Neo: Your AI Platform Teammate