gcloud alpha compute ssl-policies create - create a new Compute Engine SSL policy

gcloud alpha compute ssl-policies createSSL_POLICY[--custom-features=[CUSTOM_FEATURES,…]][--description=DESCRIPTION][--min-tls-version=MIN_TLS_VERSION; default="1.0"][--profile=PROFILE; default="COMPATIBLE"][--global    |--region=REGION][GCLOUD_WIDE_FLAG …]

An SSL policy specifies the server-side support for SSL features. An SSL policycan be attached to a TargetHttpsProxy or a TargetSslProxy. This affectsconnections between clients and the load balancer. SSL policies do not affectthe connection between the load balancers and the backends. SSL policies areused by Application Load Balancers and proxy Network Load Balancers.

SSL_POLICY

Name of the SSL policy to create.

--custom-features=[CUSTOM_FEATURES,…]

A comma-separated list of custom features, required when the profile being usedis CUSTOM.

Using CUSTOM profile allows customization of the features that are part of theSSL policy. This flag allows specifying those custom features.

The list of all supported custom features can be obtained using:

gcloudcomputessl-policieslist-available-features

--description=DESCRIPTION

An optional, textual description for the SSL policy.

--min-tls-version=MIN_TLS_VERSION; default="1.0"

Minimum TLS version.MIN_TLS_VERSION must be one of:

1.0

TLS 1.0.

1.1

TLS 1.1.

1.2

TLS 1.2.

1.3

TLS 1.3.

--profile=PROFILE; default="COMPATIBLE"

SSL policy profile. Changing profile from CUSTOM toCOMPATIBLE|MODERN|RESTRICTED|FIPS_202205 will clear the custom-features field.PROFILE must be one of:

COMPATIBLE

Compatible profile. Allows the broadest set of clients, even those which supportonly out-of-date SSL features, to negotiate SSL with the load balancer.

CUSTOM

Custom profile. Allows customization by selecting only the features which arerequired. The list of all available features can be obtained using:

gcloudcomputessl-policieslist-available-features

FIPS_202205

FIPS_202205 profile. Supports a reduced set of SSL features, intended to meetstricter compliance requirements.

MODERN

Modern profile. Supports a wide set of SSL features, allowing modern clients tonegotiate SSL.

RESTRICTED

Restricted profile. Supports a reduced set of SSL features, intended to meetstricter compliance requirements.

At most one of these can be specified:

--global

If set, the SSL policy is global.

--region=REGION

Region of the SSL policy to create. Overrides the defaultcompute/region property value for this command invocation.

Run$gcloud help for details.