Indicates whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). Valid values are monitor, defensive (default), strictest.

Desync Mitigation Mode stringĭetermines how the load balancer handles requests that might pose a security risk to an application due to HTTP desync. The ID of the customer owned ipv4 pool to use for this load balancer. Def LoadBalancer ( resource_name : str, opts : Optional = None, access_logs : Optional = None, customer_owned_ipv4_pool : Optional = None, desync_mitigation_mode : Optional = None, drop_invalid_header_fields : Optional = None, enable_cross_zone_load_balancing : Optional = None, enable_deletion_protection : Optional = None, enable_http2 : Optional = None, enable_tls_version_and_cipher_suite_headers : Optional = None, enable_waf_fail_open : Optional = None, enable_xff_client_port : Optional = None, idle_timeout : Optional = None, internal : Optional = None, ip_address_type : Optional = None, load_balancer_type : Optional = None, name : Optional = None, name_prefix : Optional = None, preserve_host_header : Optional = None, security_groups : Optional] = None, subnet_mappings : Optional] = None, subnets : Optional] = None, tags : Optional] = None, xff_header_processing_mode : Optional = None ) def LoadBalancer ( resource_name : str, args : Optional = None, opts : Optional = None )Īccess Logs Load Balancer Access Logs ArgsĪn Access Logs block.

Waf nlb