Package com.vmware.nsx_policy.model

Class PolicyTraceflowObservationDropped.Builder

java.lang.Object

com.vmware.nsx_policy.model.PolicyTraceflowObservationDropped.Builder

Enclosing class:

PolicyTraceflowObservationDropped

public static final class PolicyTraceflowObservationDropped.Builder
extends java.lang.Object

Builder class for PolicyTraceflowObservationDropped.

Constructor Summary

Constructors

Constructor	Description
Builder(java.lang.String resourceType)	Constructor with parameters for the required properties of PolicyTraceflowObservationDropped.

Method Summary

Modifier and Type	Method	Description
PolicyTraceflowObservationDropped	build()
PolicyTraceflowObservationDropped.Builder	setAclRuleId(java.lang.Long aclRuleId)	This field is specified when the traceflow packet matched a L3 firewall rule.
PolicyTraceflowObservationDropped.Builder	setAclRulePath(java.lang.String aclRulePath)	The path of the ACL rule that was applied to forward the traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setArpFailReason(java.lang.String arpFailReason)	Possible values are: TraceflowObservationDropped.ARP_FAIL_REASON_UNKNOWN TraceflowObservationDropped.ARP_FAIL_REASON_TIMEOUT TraceflowObservationDropped.ARP_FAIL_REASON_CPFAIL TraceflowObservationDropped.ARP_FAIL_REASON_FROMCP TraceflowObservationDropped.ARP_FAIL_REASON_PORTDESTROY TraceflowObservationDropped.ARP_FAIL_REASON_TABLEDESTROY TraceflowObservationDropped.ARP_FAIL_REASON_NETDESTROY This field specifies the ARP fails reason ARP_TIMEOUT - ARP failure due to query control plane timeout ARP_CPFAIL - ARP failure due post ARP query message to control plane failure ARP_FROMCP - ARP failure due to deleting ARP entry from control plane ARP_PORTDESTROY - ARP failure due to port destruction ARP_TABLEDESTROY - ARP failure due to ARP table destruction ARP_NETDESTROY - ARP failure due to overlay network destruction This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setComponentName(java.lang.String componentName)	The name of the component that issued the observation.
PolicyTraceflowObservationDropped.Builder	setComponentSubType(java.lang.String componentSubType)	Possible values are: TraceflowObservation.COMPONENT_SUB_TYPE_LR_TIER0 TraceflowObservation.COMPONENT_SUB_TYPE_LR_TIER1 TraceflowObservation.COMPONENT_SUB_TYPE_LR_VRF_TIER0 TraceflowObservation.COMPONENT_SUB_TYPE_LS_TRANSIT TraceflowObservation.COMPONENT_SUB_TYPE_SI_CLASSIFIER TraceflowObservation.COMPONENT_SUB_TYPE_SI_PROXY TraceflowObservation.COMPONENT_SUB_TYPE_VDR TraceflowObservation.COMPONENT_SUB_TYPE_ENI TraceflowObservation.COMPONENT_SUB_TYPE_AWS_GATEWAY TraceflowObservation.COMPONENT_SUB_TYPE_TGW_ROUTE TraceflowObservation.COMPONENT_SUB_TYPE_EDGE_UPLINK TraceflowObservation.COMPONENT_SUB_TYPE_DELL_GATEWAY TraceflowObservation.COMPONENT_SUB_TYPE_LGW_ROUTE TraceflowObservation.COMPONENT_SUB_TYPE_LR_KNI TraceflowObservation.COMPONENT_SUB_TYPE_UNKNOWN The sub type of the component that issued the observation.
PolicyTraceflowObservationDropped.Builder	setComponentType(java.lang.String componentType)	Possible values are: TraceflowObservation.COMPONENT_TYPE_PHYSICAL TraceflowObservation.COMPONENT_TYPE_LR TraceflowObservation.COMPONENT_TYPE_LS TraceflowObservation.COMPONENT_TYPE_DFW TraceflowObservation.COMPONENT_TYPE_BRIDGE TraceflowObservation.COMPONENT_TYPE_EDGE_TUNNEL TraceflowObservation.COMPONENT_TYPE_EDGE_HOSTSWITCH TraceflowObservation.COMPONENT_TYPE_FW_BRIDGE TraceflowObservation.COMPONENT_TYPE_EDGE_RTEP_TUNNEL TraceflowObservation.COMPONENT_TYPE_LOAD_BALANCER TraceflowObservation.COMPONENT_TYPE_NAT TraceflowObservation.COMPONENT_TYPE_IPSEC TraceflowObservation.COMPONENT_TYPE_SERVICE_INSERTION TraceflowObservation.COMPONENT_TYPE_VMC TraceflowObservation.COMPONENT_TYPE_SPOOFGUARD TraceflowObservation.COMPONENT_TYPE_EDGE_FW TraceflowObservation.COMPONENT_TYPE_DLB TraceflowObservation.COMPONENT_TYPE_ANTREA_SPOOFGUARD TraceflowObservation.COMPONENT_TYPE_ANTREA_LB TraceflowObservation.COMPONENT_TYPE_ANTREA_ROUTING TraceflowObservation.COMPONENT_TYPE_ANTREA_DFW TraceflowObservation.COMPONENT_TYPE_ANTREA_FORWARDING TraceflowObservation.COMPONENT_TYPE_HOST_SWITCH TraceflowObservation.COMPONENT_TYPE_UNKNOWN The type of the component that issued the observation.
PolicyTraceflowObservationDropped.Builder	setInterfacePath(java.lang.String interfacePath)	Path of interface This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setIpsecFailReason(java.lang.String ipsecFailReason)	Possible values are: TraceflowObservationDropped.IPSEC_FAIL_REASON_SA_NOT_FOUND TraceflowObservationDropped.IPSEC_FAIL_REASON_UDP_ENC_STATE_MISMATCH TraceflowObservationDropped.IPSEC_FAIL_REASON_SEQ_ROLLOVER TraceflowObservationDropped.IPSEC_FAIL_REASON_FRAG_NEEDED TraceflowObservationDropped.IPSEC_FAIL_REASON_TUN_IFACE_DOWN TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_NOMATCH TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_BLOCK TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_ERROR TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_SEQ_NUM_REPEAT TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_RECV_DELAY TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_PROC_DELAY TraceflowObservationDropped.IPSEC_FAIL_REASON_ZERO_SEQ_NUM_RECVD TraceflowObservationDropped.IPSEC_FAIL_REASON_ENQUEUE_FAIL TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_DGST_MISMATCH TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_DGST_SIZE_MISMATCH TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_UNSUPPORTED_ALGO TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_FAIL TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_PROC_INCOMPLETE TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_SESSION_INV TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_ARGS_INV TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_PROC_ERROR TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_NO_BUF_SPACE TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_UNSUPPORTED_CIPHER TraceflowObservationDropped.IPSEC_FAIL_REASON_MALFORMED TraceflowObservationDropped.IPSEC_FAIL_REASON_MALFORMED_INV_PADDING TraceflowObservationDropped.IPSEC_FAIL_REASON_PADDING_REMOVAL_FAILED TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_IP TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_UDP TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_TCP TraceflowObservationDropped.IPSEC_FAIL_REASON_UNKNOWN This field specifies the IPSec VPN fails reason IPSEC_SA_NOT_FOUND - IPSec SA required for processing the packet does not exist IPSEC_UDP_ENC_STATE_MISMATCH - ESP packet is UDP encapsulated but IPsec SA does not expect UDP encapsulation IPSEC_SEQ_ROLLOVER - IPSec SA sequence number has exceeded the maximum value IPSEC_FRAG_NEEDED - Received packet has DF bit set in IP header but requires fragmentation due to ESP encapsulation IPSEC_TUN_IFACE_DOWN - IPSec tunnel interface is down IPSEC_POLICY_NOMATCH - Received packet does not match IPSec policy IPSEC_POLICY_BLOCK - IPSec packet processing failed IPSEC_POLICY_ERROR - IPSec packet processing failed IPSEC_REPLAY_SEQ_NUM_REPEAT - IPSec packet is dropped due to replay IPSEC_REPLAY_RECV_DELAY - IPSec packet is dropped due to replay IPSEC_REPLAY_PROC_DELAY - IPSec packet is dropped due to replay IPSEC_ZERO_SEQ_NUM_RECVD - ESP packet is received with sequence number as zero IPSEC_ENQUEUE_FAIL - Packet processing failed during crypto operation IPSEC_AUTH_DGST_MISMATCH - Packet integrity check failed due to digest mismatch IPSEC_AUTH_DGST_SIZE_MISMATCH - Packet integrity check failed due to invalid digest length IPSEC_AUTH_UNSUPPORTED_ALGO - Packet integrity check failed due to unsupported hash algorithm IPSEC_CRYPTO_FAIL - Packet processing failed during crypto operation IPSEC_CRYPTO_PROC_INCOMPLETE - Packet processing failed during crypto operation IPSEC_CRYPTO_SESSION_INV - Packet processing failed during crypto operation IPSEC_CRYPTO_ARGS_INV - Packet processing failed during crypto operation IPSEC_CRYPTO_PROC_ERROR - Packet processing failed during crypto operation IPSEC_CRYPTO_NO_BUF_SPACE - Packet processing failed during crypto operation IPSEC_CRYPTO_UNSUPPORTED_CIPHER - Packet processing failed during crypto operation IPSEC_MALFORMED - Received ESP packet is malformed IPSEC_MALFORMED_INV_PADDING - Received ESP packet is malformed IPSEC_PADDING_REMOVAL_FAILED - Received ESP packet is malformed IPSEC_INNER_MALFORMED - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_IP - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_UDP - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_TCP - IP packet after ESP decryption is malformed IPSEC_UNKNOWN - IPSec VPN failure reason is unknown This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setJumptoRuleId(java.lang.Long jumptoRuleId)	This field is specified when the traceflow packet matched a jump-to rule.
PolicyTraceflowObservationDropped.Builder	setL2RuleId(java.lang.Long l2RuleId)	This field is specified when the traceflow packet matched a l2 rule.
PolicyTraceflowObservationDropped.Builder	setLportId(java.lang.String lportId)	The id of the logical port at which the traceflow packet was dropped This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setLportName(java.lang.String lportName)	The name of the logical port at which the traceflow packet was dropped This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setNatRuleId(java.lang.Long natRuleId)	This field is specified when the traceflow packet matched a NAT rule.
PolicyTraceflowObservationDropped.Builder	setNatRulePath(java.lang.String natRulePath)	The path of the NAT rule that was applied to forward the traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setReason(java.lang.String reason)	Possible values are: TraceflowObservationDropped.REASON_ARP_FAIL TraceflowObservationDropped.REASON_BFD TraceflowObservationDropped.REASON_BROADCAST TraceflowObservationDropped.REASON_DHCP TraceflowObservationDropped.REASON_DLB TraceflowObservationDropped.REASON_FW_RULE TraceflowObservationDropped.REASON_GENEVE TraceflowObservationDropped.REASON_GRE TraceflowObservationDropped.REASON_IFACE TraceflowObservationDropped.REASON_IP TraceflowObservationDropped.REASON_IP_REASS TraceflowObservationDropped.REASON_IPSEC TraceflowObservationDropped.REASON_IPSEC_VTI TraceflowObservationDropped.REASON_L2VPN TraceflowObservationDropped.REASON_L4PORT TraceflowObservationDropped.REASON_LB TraceflowObservationDropped.REASON_LROUTER TraceflowObservationDropped.REASON_LSERVICE TraceflowObservationDropped.REASON_LSWITCH TraceflowObservationDropped.REASON_MANAGEMENT TraceflowObservationDropped.REASON_MD_PROXY TraceflowObservationDropped.REASON_NAT TraceflowObservationDropped.REASON_RTEP_TUNNEL TraceflowObservationDropped.REASON_ND_NS_FAIL TraceflowObservationDropped.REASON_NEIGH TraceflowObservationDropped.REASON_NO_EIP_FOUND TraceflowObservationDropped.REASON_NO_EIP_ASSOCIATION TraceflowObservationDropped.REASON_NO_ENI_FOR_IP TraceflowObservationDropped.REASON_NO_ENI_FOR_LIF TraceflowObservationDropped.REASON_NO_ROUTE TraceflowObservationDropped.REASON_NO_ROUTE_TABLE_FOUND TraceflowObservationDropped.REASON_NO_UNDERLAY_ROUTE_FOUND TraceflowObservationDropped.REASON_NOT_VDR_DOWNLINK TraceflowObservationDropped.REASON_NO_VDR_FOUND TraceflowObservationDropped.REASON_NO_VDR_ON_HOST TraceflowObservationDropped.REASON_NOT_VDR_UPLINK TraceflowObservationDropped.REASON_SERVICE_INSERT TraceflowObservationDropped.REASON_SPOOFGUARD TraceflowObservationDropped.REASON_TTL_ZERO TraceflowObservationDropped.REASON_TUNNEL TraceflowObservationDropped.REASON_VLAN TraceflowObservationDropped.REASON_VXLAN TraceflowObservationDropped.REASON_VXSTT TraceflowObservationDropped.REASON_VMC_NO_RESPONSE TraceflowObservationDropped.REASON_WRONG_UPLINK TraceflowObservationDropped.REASON_FW_STATE TraceflowObservationDropped.REASON_NO_MAC TraceflowObservationDropped.REASON_UNKNOWN TraceflowObservationDropped.REASON_FILTERED_UPLINK This field specifies the drop reason of traceflow packet.
PolicyTraceflowObservationDropped.Builder	setSegmentPortPath(java.lang.String segmentPortPath)	Path of segment port This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setSequenceNo(java.lang.Long sequenceNo)	the hop count for observations on the transport node that a traceflow packet is injected in will be 0.
PolicyTraceflowObservationDropped.Builder	setSitePath(java.lang.String sitePath)	This field contains the site path where this observation was generated.
PolicyTraceflowObservationDropped.Builder	setTimestamp(java.lang.Long timestamp)	Timestamp when the observation was created by the transport node (milliseconds epoch) format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setTimestampMicro(java.lang.Long timestampMicro)	Timestamp when the observation was created by the transport node (microseconds epoch) format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setTransportNodeId(java.lang.String transportNodeId)	id of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setTransportNodeName(java.lang.String transportNodeName)	name of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.
PolicyTraceflowObservationDropped.Builder	setTransportNodeType(java.lang.String transportNodeType)	Possible values are: TraceflowObservation.TRANSPORT_NODE_TYPE_ESX TraceflowObservation.TRANSPORT_NODE_TYPE_RHELKVM TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUKVM TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSKVM TraceflowObservation.TRANSPORT_NODE_TYPE_RHELCONTAINER TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSCONTAINER TraceflowObservation.TRANSPORT_NODE_TYPE_RHELSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_SLESKVM TraceflowObservation.TRANSPORT_NODE_TYPE_SLESSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_WINDOWSSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_RHELSMARTNIC TraceflowObservation.TRANSPORT_NODE_TYPE_OELSERVER TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUSMARTNIC TraceflowObservation.TRANSPORT_NODE_TYPE_EDGE TraceflowObservation.TRANSPORT_NODE_TYPE_PUBLIC_CLOUD_GATEWAY_NODE TraceflowObservation.TRANSPORT_NODE_TYPE_OTHERS TraceflowObservation.TRANSPORT_NODE_TYPE_HYPERV type of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

Builder

public Builder(java.lang.String resourceType)

Constructor with parameters for the required properties of PolicyTraceflowObservationDropped.

Method Detail

setAclRulePath

public PolicyTraceflowObservationDropped.Builder setAclRulePath(java.lang.String aclRulePath)

The path of the ACL rule that was applied to forward the traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

aclRulePath - New value for the property.

setInterfacePath

public PolicyTraceflowObservationDropped.Builder setInterfacePath(java.lang.String interfacePath)

Path of interface This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

interfacePath - New value for the property.

setNatRulePath

public PolicyTraceflowObservationDropped.Builder setNatRulePath(java.lang.String natRulePath)

The path of the NAT rule that was applied to forward the traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

natRulePath - New value for the property.

setSegmentPortPath

public PolicyTraceflowObservationDropped.Builder setSegmentPortPath(java.lang.String segmentPortPath)

Path of segment port This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

segmentPortPath - New value for the property.

setAclRuleId

public PolicyTraceflowObservationDropped.Builder setAclRuleId(java.lang.Long aclRuleId)

This field is specified when the traceflow packet matched a L3 firewall rule. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

aclRuleId - New value for the property.

setArpFailReason

public PolicyTraceflowObservationDropped.Builder setArpFailReason(java.lang.String arpFailReason)

Possible values are:

• TraceflowObservationDropped.ARP_FAIL_REASON_UNKNOWN
• TraceflowObservationDropped.ARP_FAIL_REASON_TIMEOUT
• TraceflowObservationDropped.ARP_FAIL_REASON_CPFAIL
• TraceflowObservationDropped.ARP_FAIL_REASON_FROMCP
• TraceflowObservationDropped.ARP_FAIL_REASON_PORTDESTROY
• TraceflowObservationDropped.ARP_FAIL_REASON_TABLEDESTROY
• TraceflowObservationDropped.ARP_FAIL_REASON_NETDESTROY

This field specifies the ARP fails reason ARP_TIMEOUT - ARP failure due to query control plane timeout ARP_CPFAIL - ARP failure due post ARP query message to control plane failure ARP_FROMCP - ARP failure due to deleting ARP entry from control plane ARP_PORTDESTROY - ARP failure due to port destruction ARP_TABLEDESTROY - ARP failure due to ARP table destruction ARP_NETDESTROY - ARP failure due to overlay network destruction This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

arpFailReason - New value for the property.

setIpsecFailReason

public PolicyTraceflowObservationDropped.Builder setIpsecFailReason(java.lang.String ipsecFailReason)

Possible values are:

• TraceflowObservationDropped.IPSEC_FAIL_REASON_SA_NOT_FOUND
• TraceflowObservationDropped.IPSEC_FAIL_REASON_UDP_ENC_STATE_MISMATCH
• TraceflowObservationDropped.IPSEC_FAIL_REASON_SEQ_ROLLOVER
• TraceflowObservationDropped.IPSEC_FAIL_REASON_FRAG_NEEDED
• TraceflowObservationDropped.IPSEC_FAIL_REASON_TUN_IFACE_DOWN
• TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_NOMATCH
• TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_BLOCK
• TraceflowObservationDropped.IPSEC_FAIL_REASON_POLICY_ERROR
• TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_SEQ_NUM_REPEAT
• TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_RECV_DELAY
• TraceflowObservationDropped.IPSEC_FAIL_REASON_REPLAY_PROC_DELAY
• TraceflowObservationDropped.IPSEC_FAIL_REASON_ZERO_SEQ_NUM_RECVD
• TraceflowObservationDropped.IPSEC_FAIL_REASON_ENQUEUE_FAIL
• TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_DGST_MISMATCH
• TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_DGST_SIZE_MISMATCH
• TraceflowObservationDropped.IPSEC_FAIL_REASON_AUTH_UNSUPPORTED_ALGO
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_FAIL
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_PROC_INCOMPLETE
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_SESSION_INV
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_ARGS_INV
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_PROC_ERROR
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_NO_BUF_SPACE
• TraceflowObservationDropped.IPSEC_FAIL_REASON_CRYPTO_UNSUPPORTED_CIPHER
• TraceflowObservationDropped.IPSEC_FAIL_REASON_MALFORMED
• TraceflowObservationDropped.IPSEC_FAIL_REASON_MALFORMED_INV_PADDING
• TraceflowObservationDropped.IPSEC_FAIL_REASON_PADDING_REMOVAL_FAILED
• TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED
• TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_IP
• TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_UDP
• TraceflowObservationDropped.IPSEC_FAIL_REASON_INNER_MALFORMED_TCP
• TraceflowObservationDropped.IPSEC_FAIL_REASON_UNKNOWN

This field specifies the IPSec VPN fails reason IPSEC_SA_NOT_FOUND - IPSec SA required for processing the packet does not exist IPSEC_UDP_ENC_STATE_MISMATCH - ESP packet is UDP encapsulated but IPsec SA does not expect UDP encapsulation IPSEC_SEQ_ROLLOVER - IPSec SA sequence number has exceeded the maximum value IPSEC_FRAG_NEEDED - Received packet has DF bit set in IP header but requires fragmentation due to ESP encapsulation IPSEC_TUN_IFACE_DOWN - IPSec tunnel interface is down IPSEC_POLICY_NOMATCH - Received packet does not match IPSec policy IPSEC_POLICY_BLOCK - IPSec packet processing failed IPSEC_POLICY_ERROR - IPSec packet processing failed IPSEC_REPLAY_SEQ_NUM_REPEAT - IPSec packet is dropped due to replay IPSEC_REPLAY_RECV_DELAY - IPSec packet is dropped due to replay IPSEC_REPLAY_PROC_DELAY - IPSec packet is dropped due to replay IPSEC_ZERO_SEQ_NUM_RECVD - ESP packet is received with sequence number as zero IPSEC_ENQUEUE_FAIL - Packet processing failed during crypto operation IPSEC_AUTH_DGST_MISMATCH - Packet integrity check failed due to digest mismatch IPSEC_AUTH_DGST_SIZE_MISMATCH - Packet integrity check failed due to invalid digest length IPSEC_AUTH_UNSUPPORTED_ALGO - Packet integrity check failed due to unsupported hash algorithm IPSEC_CRYPTO_FAIL - Packet processing failed during crypto operation IPSEC_CRYPTO_PROC_INCOMPLETE - Packet processing failed during crypto operation IPSEC_CRYPTO_SESSION_INV - Packet processing failed during crypto operation IPSEC_CRYPTO_ARGS_INV - Packet processing failed during crypto operation IPSEC_CRYPTO_PROC_ERROR - Packet processing failed during crypto operation IPSEC_CRYPTO_NO_BUF_SPACE - Packet processing failed during crypto operation IPSEC_CRYPTO_UNSUPPORTED_CIPHER - Packet processing failed during crypto operation IPSEC_MALFORMED - Received ESP packet is malformed IPSEC_MALFORMED_INV_PADDING - Received ESP packet is malformed IPSEC_PADDING_REMOVAL_FAILED - Received ESP packet is malformed IPSEC_INNER_MALFORMED - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_IP - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_UDP - IP packet after ESP decryption is malformed IPSEC_INNER_MALFORMED_TCP - IP packet after ESP decryption is malformed IPSEC_UNKNOWN - IPSec VPN failure reason is unknown This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

ipsecFailReason - New value for the property.

setJumptoRuleId

public PolicyTraceflowObservationDropped.Builder setJumptoRuleId(java.lang.Long jumptoRuleId)

This field is specified when the traceflow packet matched a jump-to rule. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

jumptoRuleId - New value for the property.

setL2RuleId

public PolicyTraceflowObservationDropped.Builder setL2RuleId(java.lang.Long l2RuleId)

This field is specified when the traceflow packet matched a l2 rule. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

l2RuleId - New value for the property.

setLportId

public PolicyTraceflowObservationDropped.Builder setLportId(java.lang.String lportId)

The id of the logical port at which the traceflow packet was dropped This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

lportId - New value for the property.

setLportName

public PolicyTraceflowObservationDropped.Builder setLportName(java.lang.String lportName)

The name of the logical port at which the traceflow packet was dropped This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

lportName - New value for the property.

setNatRuleId

public PolicyTraceflowObservationDropped.Builder setNatRuleId(java.lang.Long natRuleId)

This field is specified when the traceflow packet matched a NAT rule. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

natRuleId - New value for the property.

setReason

public PolicyTraceflowObservationDropped.Builder setReason(java.lang.String reason)

Possible values are:

• TraceflowObservationDropped.REASON_ARP_FAIL
• TraceflowObservationDropped.REASON_BFD
• TraceflowObservationDropped.REASON_BROADCAST
• TraceflowObservationDropped.REASON_DHCP
• TraceflowObservationDropped.REASON_DLB
• TraceflowObservationDropped.REASON_FW_RULE
• TraceflowObservationDropped.REASON_GENEVE
• TraceflowObservationDropped.REASON_GRE
• TraceflowObservationDropped.REASON_IFACE
• TraceflowObservationDropped.REASON_IP
• TraceflowObservationDropped.REASON_IP_REASS
• TraceflowObservationDropped.REASON_IPSEC
• TraceflowObservationDropped.REASON_IPSEC_VTI
• TraceflowObservationDropped.REASON_L2VPN
• TraceflowObservationDropped.REASON_L4PORT
• TraceflowObservationDropped.REASON_LB
• TraceflowObservationDropped.REASON_LROUTER
• TraceflowObservationDropped.REASON_LSERVICE
• TraceflowObservationDropped.REASON_LSWITCH
• TraceflowObservationDropped.REASON_MANAGEMENT
• TraceflowObservationDropped.REASON_MD_PROXY
• TraceflowObservationDropped.REASON_NAT
• TraceflowObservationDropped.REASON_RTEP_TUNNEL
• TraceflowObservationDropped.REASON_ND_NS_FAIL
• TraceflowObservationDropped.REASON_NEIGH
• TraceflowObservationDropped.REASON_NO_EIP_FOUND
• TraceflowObservationDropped.REASON_NO_EIP_ASSOCIATION
• TraceflowObservationDropped.REASON_NO_ENI_FOR_IP
• TraceflowObservationDropped.REASON_NO_ENI_FOR_LIF
• TraceflowObservationDropped.REASON_NO_ROUTE
• TraceflowObservationDropped.REASON_NO_ROUTE_TABLE_FOUND
• TraceflowObservationDropped.REASON_NO_UNDERLAY_ROUTE_FOUND
• TraceflowObservationDropped.REASON_NOT_VDR_DOWNLINK
• TraceflowObservationDropped.REASON_NO_VDR_FOUND
• TraceflowObservationDropped.REASON_NO_VDR_ON_HOST
• TraceflowObservationDropped.REASON_NOT_VDR_UPLINK
• TraceflowObservationDropped.REASON_SERVICE_INSERT
• TraceflowObservationDropped.REASON_SPOOFGUARD
• TraceflowObservationDropped.REASON_TTL_ZERO
• TraceflowObservationDropped.REASON_TUNNEL
• TraceflowObservationDropped.REASON_VLAN
• TraceflowObservationDropped.REASON_VXLAN
• TraceflowObservationDropped.REASON_VXSTT
• TraceflowObservationDropped.REASON_VMC_NO_RESPONSE
• TraceflowObservationDropped.REASON_WRONG_UPLINK
• TraceflowObservationDropped.REASON_FW_STATE
• TraceflowObservationDropped.REASON_NO_MAC
• TraceflowObservationDropped.REASON_UNKNOWN
• TraceflowObservationDropped.REASON_FILTERED_UPLINK

This field specifies the drop reason of traceflow packet. ARP_FAIL - ARP request fails for some reasons, please refer arp_fail_reason for detail BFD - BFD packet is dropped because traversed by non-operative interface or encountering internal error (e.g., memory insufficient) BROADCAST - Packet is dropped during traversing the interface (e.g., Edge uplink, Edge centralized service port) which disallow ethernet broadcast DHCP - DHCP packet is malformed DLB - The packet is disallowed by distributed load balancing FW_RULE - The packet matches a drop or reject rule of DFW or Edge firewall GENEVE - GENEVE packet is malformed GRE - GRE packet is malformed or traverses a non-operative interface IFACE - Packet traverses a non-operative interface IP - Packet is dropped because of IP related causes (e.g., ICMPv4/ICMPv6 packet is malformed, or DF flag is set but fragment must be performed for the packet) or corresponding interface is not found or inoperative IP_REASS - Packet is dropped during IP reassembly IPSEC - IPsec protocol related packet is dropped IPSEC_VTI - IPsec required SA is not found or traversing inoperative interface cause packet dropped L2VPN - VLAN id of GRE packet is invalid L4PORT - Layer 4 packet (e.g., BFD, DHCP) is dropped LB - Packet is dropped by load balancing rule LROUTER - Packet is dropped by logical router LSERVICE - Packet is malformed or traverses inoperative logical service interface LSWITCH - Packet is dropped by logical switch MANAGEMENT - Packet is dropped by Edge datapath MANAGEMENT service port MD_PROXY - Packet is dropped by metadata proxy NAT - Packet is dropped by NAT rule RTEP_TUNNEL - Unused drop reason ND_NS_FAIL - Neighbor Discovery packet fails NEIGH - ARP or Neighbor Discovery packet fails NO_EIP_FOUND - Destination IP is not an elastic IP NO_EIP_ASSOCIATION - Elastic IP is not associated with active edge VDR ENI NO_ENI_FOR_IP - There is no ENI found for the destination IP NO_ENI_FOR_LIF - Cannot find an ENI associated with uplink LIF NO_ROUTE - Cannot find route for destination IP NO_ROUTE_TABLE_FOUND - Cannot find associated route table NO_UNDERLAY_ROUTE_FOUND - Cannot find AWS route to destination NOT_VDR_DOWNLINK - Packet is not forwarded to VMC unmanaged VDR downlink NO_VDR_FOUND - VMC unmanaged VDR associated with Edge uplink is not found NO_VDR_ON_HOST - Cannot find VMC unmanaged VDR list on this host NOT_VDR_UPLINK - Packet is not forwarded to VDR uplink SERVICE_INSERT - Packet from guest VM to service VM or from service VM to guest VM is dropped by firewall rule SPOOFGUARD - Packet is blocked by SpoofGuard policy TTL_ZERO - The IPv4 time to live field or the IPv6 hop limit field of packet is zero TUNNEL - Overlay tunnel management packet (VNI value of GENEVE header is 0, e.g., BFD) is dropped VLAN - VLAN id of packet is disallowed by the given port VXLAN - VXLAN packet is malformed or cannot find tunnel port for it VXSTT - Unused drop reason VMC_NO_RESPONSE - Failed to query VMC observations as no response from VMC app WRONG_UPLINK - Packet is not routed to the expected Edge uplink by VMC unmanaged VDR FW_STATE - Packet is dropped by stateful firewall NO_MAC - Drop by vswitch as no destination MAC hit MAC Table. FILTERED_UPLINK - Filtering applied at the corresponding UPLINK having no aggregation. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

reason - New value for the property.

setComponentName

public PolicyTraceflowObservationDropped.Builder setComponentName(java.lang.String componentName)

The name of the component that issued the observation. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

componentName - New value for the property.

setComponentSubType

public PolicyTraceflowObservationDropped.Builder setComponentSubType(java.lang.String componentSubType)

Possible values are:

• TraceflowObservation.COMPONENT_SUB_TYPE_LR_TIER0
• TraceflowObservation.COMPONENT_SUB_TYPE_LR_TIER1
• TraceflowObservation.COMPONENT_SUB_TYPE_LR_VRF_TIER0
• TraceflowObservation.COMPONENT_SUB_TYPE_LS_TRANSIT
• TraceflowObservation.COMPONENT_SUB_TYPE_SI_CLASSIFIER
• TraceflowObservation.COMPONENT_SUB_TYPE_SI_PROXY
• TraceflowObservation.COMPONENT_SUB_TYPE_VDR
• TraceflowObservation.COMPONENT_SUB_TYPE_ENI
• TraceflowObservation.COMPONENT_SUB_TYPE_AWS_GATEWAY
• TraceflowObservation.COMPONENT_SUB_TYPE_TGW_ROUTE
• TraceflowObservation.COMPONENT_SUB_TYPE_EDGE_UPLINK
• TraceflowObservation.COMPONENT_SUB_TYPE_DELL_GATEWAY
• TraceflowObservation.COMPONENT_SUB_TYPE_LGW_ROUTE
• TraceflowObservation.COMPONENT_SUB_TYPE_LR_KNI
• TraceflowObservation.COMPONENT_SUB_TYPE_UNKNOWN

The sub type of the component that issued the observation. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

componentSubType - New value for the property.

setComponentType

public PolicyTraceflowObservationDropped.Builder setComponentType(java.lang.String componentType)

Possible values are:

• TraceflowObservation.COMPONENT_TYPE_PHYSICAL
• TraceflowObservation.COMPONENT_TYPE_LR
• TraceflowObservation.COMPONENT_TYPE_LS
• TraceflowObservation.COMPONENT_TYPE_DFW
• TraceflowObservation.COMPONENT_TYPE_BRIDGE
• TraceflowObservation.COMPONENT_TYPE_EDGE_TUNNEL
• TraceflowObservation.COMPONENT_TYPE_EDGE_HOSTSWITCH
• TraceflowObservation.COMPONENT_TYPE_FW_BRIDGE
• TraceflowObservation.COMPONENT_TYPE_EDGE_RTEP_TUNNEL
• TraceflowObservation.COMPONENT_TYPE_LOAD_BALANCER
• TraceflowObservation.COMPONENT_TYPE_NAT
• TraceflowObservation.COMPONENT_TYPE_IPSEC
• TraceflowObservation.COMPONENT_TYPE_SERVICE_INSERTION
• TraceflowObservation.COMPONENT_TYPE_VMC
• TraceflowObservation.COMPONENT_TYPE_SPOOFGUARD
• TraceflowObservation.COMPONENT_TYPE_EDGE_FW
• TraceflowObservation.COMPONENT_TYPE_DLB
• TraceflowObservation.COMPONENT_TYPE_ANTREA_SPOOFGUARD
• TraceflowObservation.COMPONENT_TYPE_ANTREA_LB
• TraceflowObservation.COMPONENT_TYPE_ANTREA_ROUTING
• TraceflowObservation.COMPONENT_TYPE_ANTREA_DFW
• TraceflowObservation.COMPONENT_TYPE_ANTREA_FORWARDING
• TraceflowObservation.COMPONENT_TYPE_HOST_SWITCH
• TraceflowObservation.COMPONENT_TYPE_UNKNOWN

The type of the component that issued the observation. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

componentType - New value for the property.

setSequenceNo

public PolicyTraceflowObservationDropped.Builder setSequenceNo(java.lang.Long sequenceNo)

the hop count for observations on the transport node that a traceflow packet is injected in will be 0. The hop count is incremented each time a subsequent transport node receives the traceflow packet. The sequence number of 999 indicates that the hop count could not be determined for the containing observation. format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

sequenceNo - New value for the property.

setSitePath

public PolicyTraceflowObservationDropped.Builder setSitePath(java.lang.String sitePath)

This field contains the site path where this observation was generated. This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

sitePath - New value for the property.

setTimestamp

public PolicyTraceflowObservationDropped.Builder setTimestamp(java.lang.Long timestamp)

Timestamp when the observation was created by the transport node (milliseconds epoch) format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

timestamp - New value for the property.

setTimestampMicro

public PolicyTraceflowObservationDropped.Builder setTimestampMicro(java.lang.Long timestampMicro)

Timestamp when the observation was created by the transport node (microseconds epoch) format: int64 This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

timestampMicro - New value for the property.

setTransportNodeId

public PolicyTraceflowObservationDropped.Builder setTransportNodeId(java.lang.String transportNodeId)

id of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

transportNodeId - New value for the property.

setTransportNodeName

public PolicyTraceflowObservationDropped.Builder setTransportNodeName(java.lang.String transportNodeName)

name of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

transportNodeName - New value for the property.

setTransportNodeType

public PolicyTraceflowObservationDropped.Builder setTransportNodeType(java.lang.String transportNodeType)

Possible values are:

• TraceflowObservation.TRANSPORT_NODE_TYPE_ESX
• TraceflowObservation.TRANSPORT_NODE_TYPE_RHELKVM
• TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUKVM
• TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSKVM
• TraceflowObservation.TRANSPORT_NODE_TYPE_RHELCONTAINER
• TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSCONTAINER
• TraceflowObservation.TRANSPORT_NODE_TYPE_RHELSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_CENTOSSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_SLESKVM
• TraceflowObservation.TRANSPORT_NODE_TYPE_SLESSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_WINDOWSSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_RHELSMARTNIC
• TraceflowObservation.TRANSPORT_NODE_TYPE_OELSERVER
• TraceflowObservation.TRANSPORT_NODE_TYPE_UBUNTUSMARTNIC
• TraceflowObservation.TRANSPORT_NODE_TYPE_EDGE
• TraceflowObservation.TRANSPORT_NODE_TYPE_PUBLIC_CLOUD_GATEWAY_NODE
• TraceflowObservation.TRANSPORT_NODE_TYPE_OTHERS
• TraceflowObservation.TRANSPORT_NODE_TYPE_HYPERV

type of the transport node that observed a traceflow packet This property may be present in responses from the server, but if it is present in a request to server it will be ignored.

Parameters:

transportNodeType - New value for the property.

build

public PolicyTraceflowObservationDropped build()