Added DNS firewall configuration

src/Extensions/Cloudflare.Dns/Models/DnsFirewallCluster.cs

@@ -0,0 +1,140 @@
+namespace AMWD.Net.Api.Cloudflare.Dns
+{
+	/// <summary>
+	/// Represents the response data for a DNS Firewall configuration on cloudflare.
+	/// </summary>
+	public class DnsFirewallCluster
+	{
+		/// <summary>
+		/// The identifier.
+		/// </summary>
+		[JsonProperty("id")]
+		public string? Id { get; set; }
+
+		/// <summary>
+		/// Whether to refuse to answer queries for the ANY type.
+		/// </summary>
+		[JsonProperty("deprecate_any_requests")]
+		public bool? DeprecateAnyRequests { get; set; }
+
+		/// <summary>
+		/// List of IPs used by DNS Firewall cluster.
+		/// </summary>
+		[JsonProperty("dns_firewall_ips")]
+		public IReadOnlyCollection<string>? DnsFirewallIps { get; set; }
+
+		/// <summary>
+		/// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent.
+		/// </summary>
+		[JsonProperty("ecs_fallback")]
+		public bool? EcsFallback { get; set; }
+
+		/// <summary>
+		/// <para>
+		/// By default, Cloudflare attempts to cache responses for as long as indicated by
+		/// the TTL received from upstream nameservers.This setting sets an upper bound on
+		/// this duration.For caching purposes, higher TTLs will be decreased to the
+		/// maximum value defined by this setting.
+		/// </para>
+		/// <para>
+		/// This setting does not affect the TTL value in the DNS response Cloudflare
+		/// returns to clients.Cloudflare will always forward the TTL value received from
+		/// upstream nameservers.
+		/// </para>
+		/// </summary>
+		[JsonProperty("maximum_cache_ttl")]
+		public int? MaximumCacheTtl { get; set; }
+
+		/// <summary>
+		/// <para>
+		/// By default, Cloudflare attempts to cache responses for as long as indicated by
+		/// the TTL received from upstream nameservers.This setting sets a lower bound on
+		/// this duration.For caching purposes, lower TTLs will be increased to the minimum
+		/// value defined by this setting.
+		/// </para>
+		/// <para>
+		/// This setting does not affect the TTL value in the DNS response Cloudflare
+		/// returns to clients.Cloudflare will always forward the TTL value received from
+		/// upstream nameservers.
+		/// </para>
+		/// </summary>
+		/// <remarks>
+		/// Note that, even with this setting, there is no guarantee that a response will be
+		/// cached for at least the specified duration.Cached responses may be removed
+		/// earlier for capacity or other operational reasons.
+		/// </remarks>
+		[JsonProperty("minimum_cache_ttl")]
+		public int? MinimumCacheTtl { get; set; }
+
+		/// <summary>
+		/// Last modification of DNS Firewall cluster
+		/// </summary>
+		[JsonProperty("modified_on")]
+		public DateTime? ModifiedOn { get; set; }
+
+		/// <summary>
+		/// DNS Firewall cluster name.
+		/// </summary>
+		[JsonProperty("name")]
+		public string? Name { get; set; }
+
+		/// <summary>
+		/// <para>
+		/// This setting controls how long DNS Firewall should cache negative responses
+		/// (e.g., NXDOMAIN) from the upstream servers.
+		/// </para>
+		/// <para>
+		/// This setting does not affect the TTL value in the DNS response Cloudflare
+		/// returns to clients.Cloudflare will always forward the TTL value received from
+		/// upstream nameservers.
+		/// </para>
+		/// </summary>
+		[JsonProperty("negative_cache_ttl")]
+		public int? NegativeCacheTtl { get; set; }
+
+		/// <summary>
+		/// Ratelimit in queries per second per datacenter
+		/// (applies to DNS queries sent to the upstream nameservers configured on the cluster).
+		/// </summary>
+		[JsonProperty("ratelimit")]
+		public int? RateLimit { get; set; }
+
+		/// <summary>
+		/// Number of retries for fetching DNS responses from upstream nameservers
+		/// (not counting the initial attempt).
+		/// </summary>
+		[JsonProperty("retries")]
+		public int? Retries { get; set; }
+
+		/// <summary>
+		/// Upstream DNS server IPs.
+		/// </summary>
+		[JsonProperty("upstream_ips")]
+		public IReadOnlyCollection<string>? UpstreamIps { get; set; }
+
+		/// <summary>
+		/// Attack mitigation settings.
+		/// </summary>
+		[JsonProperty("attack_mitigation")]
+		public AttackMitigation? AttackMitigation { get; set; }
+	}
+
+	/// <summary>
+	/// Attack mitigation settings.
+	/// <see href="https://github.com/cloudflare/cloudflare-typescript/blob/v4.4.1/src/resources/dns-firewall/dns-firewall.ts#L154">Source</see>
+	/// </summary>
+	public class AttackMitigation
+	{
+		/// <summary>
+		/// When enabled, automatically mitigate random-prefix attacks to protect upstream DNS servers.
+		/// </summary>
+		[JsonProperty("enabled")]
+		public bool? Enabled { get; set; }
+
+		/// <summary>
+		/// Only mitigate attacks when upstream servers seem unhealthy.
+		/// </summary>
+		[JsonProperty("only_when_upstream_unhealthy")]
+		public bool? OnlyWhenUpstreamUnhealthy { get; set; }
+	}
+}