dns_firewall

type ASN = shared.ASN

type ASNParam = shared.ASNParam

type AnalyticsReportBytimeGetParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// A comma-separated list of dimensions to group results by.
	Dimensions param.Field[string] `query:"dimensions"`
	// Segmentation filter in 'attribute operator value' format.
	Filters param.Field[string] `query:"filters"`
	// Limit number of returned metrics.
	Limit param.Field[int64] `query:"limit"`
	// A comma-separated list of metrics to query.
	Metrics param.Field[string] `query:"metrics"`
	// Start date and time of requesting data period in ISO 8601 format.
	Since param.Field[time.Time] `query:"since" format:"date-time"`
	// A comma-separated list of dimensions to sort by, where each dimension may be
	// prefixed by - (descending) or + (ascending).
	Sort param.Field[string] `query:"sort"`
	// Unit of time to group data by.
	TimeDelta param.Field[AnalyticsReportBytimeGetParamsTimeDelta] `query:"time_delta"`
	// End date and time of requesting data period in ISO 8601 format.
	Until param.Field[time.Time] `query:"until" format:"date-time"`
}

type AnalyticsReportBytimeGetParamsTimeDelta string

type AnalyticsReportBytimeGetResponseEnvelope struct {
	Errors   []AnalyticsReportBytimeGetResponseEnvelopeErrors   `json:"errors,required"`
	Messages []AnalyticsReportBytimeGetResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success AnalyticsReportBytimeGetResponseEnvelopeSuccess `json:"success,required"`
	Result  dns.ByTime                                      `json:"result"`
	JSON    analyticsReportBytimeGetResponseEnvelopeJSON    `json:"-"`
}

type AnalyticsReportBytimeGetResponseEnvelopeErrors struct {
	Code             int64                                                `json:"code,required"`
	Message          string                                               `json:"message,required"`
	DocumentationURL string                                               `json:"documentation_url"`
	Source           AnalyticsReportBytimeGetResponseEnvelopeErrorsSource `json:"source"`
	JSON             analyticsReportBytimeGetResponseEnvelopeErrorsJSON   `json:"-"`
}

type AnalyticsReportBytimeGetResponseEnvelopeErrorsSource struct {
	Pointer string                                                   `json:"pointer"`
	JSON    analyticsReportBytimeGetResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type AnalyticsReportBytimeGetResponseEnvelopeMessages struct {
	Code             int64                                                  `json:"code,required"`
	Message          string                                                 `json:"message,required"`
	DocumentationURL string                                                 `json:"documentation_url"`
	Source           AnalyticsReportBytimeGetResponseEnvelopeMessagesSource `json:"source"`
	JSON             analyticsReportBytimeGetResponseEnvelopeMessagesJSON   `json:"-"`
}

type AnalyticsReportBytimeGetResponseEnvelopeMessagesSource struct {
	Pointer string                                                     `json:"pointer"`
	JSON    analyticsReportBytimeGetResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type AnalyticsReportBytimeGetResponseEnvelopeSuccess bool

type AnalyticsReportBytimeService struct {
	Options []option.RequestOption
}

type AnalyticsReportGetParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// A comma-separated list of dimensions to group results by.
	Dimensions param.Field[string] `query:"dimensions"`
	// Segmentation filter in 'attribute operator value' format.
	Filters param.Field[string] `query:"filters"`
	// Limit number of returned metrics.
	Limit param.Field[int64] `query:"limit"`
	// A comma-separated list of metrics to query.
	Metrics param.Field[string] `query:"metrics"`
	// Start date and time of requesting data period in ISO 8601 format.
	Since param.Field[time.Time] `query:"since" format:"date-time"`
	// A comma-separated list of dimensions to sort by, where each dimension may be
	// prefixed by - (descending) or + (ascending).
	Sort param.Field[string] `query:"sort"`
	// End date and time of requesting data period in ISO 8601 format.
	Until param.Field[time.Time] `query:"until" format:"date-time"`
}

type AnalyticsReportGetResponseEnvelope struct {
	Errors   []AnalyticsReportGetResponseEnvelopeErrors   `json:"errors,required"`
	Messages []AnalyticsReportGetResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success AnalyticsReportGetResponseEnvelopeSuccess `json:"success,required"`
	Result  dns.Report                                `json:"result"`
	JSON    analyticsReportGetResponseEnvelopeJSON    `json:"-"`
}

type AnalyticsReportGetResponseEnvelopeErrors struct {
	Code             int64                                          `json:"code,required"`
	Message          string                                         `json:"message,required"`
	DocumentationURL string                                         `json:"documentation_url"`
	Source           AnalyticsReportGetResponseEnvelopeErrorsSource `json:"source"`
	JSON             analyticsReportGetResponseEnvelopeErrorsJSON   `json:"-"`
}

type AnalyticsReportGetResponseEnvelopeErrorsSource struct {
	Pointer string                                             `json:"pointer"`
	JSON    analyticsReportGetResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type AnalyticsReportGetResponseEnvelopeMessages struct {
	Code             int64                                            `json:"code,required"`
	Message          string                                           `json:"message,required"`
	DocumentationURL string                                           `json:"documentation_url"`
	Source           AnalyticsReportGetResponseEnvelopeMessagesSource `json:"source"`
	JSON             analyticsReportGetResponseEnvelopeMessagesJSON   `json:"-"`
}

type AnalyticsReportGetResponseEnvelopeMessagesSource struct {
	Pointer string                                               `json:"pointer"`
	JSON    analyticsReportGetResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type AnalyticsReportGetResponseEnvelopeSuccess bool

type AnalyticsReportService struct {
	Options []option.RequestOption
	Bytimes *AnalyticsReportBytimeService
}

type AnalyticsService struct {
	Options []option.RequestOption
	Reports *AnalyticsReportService
}

type AttackMitigation struct {
	// When enabled, automatically mitigate random-prefix attacks to protect upstream
	// DNS servers
	Enabled bool `json:"enabled"`
	// Only mitigate attacks when upstream servers seem unhealthy
	OnlyWhenUpstreamUnhealthy bool                 `json:"only_when_upstream_unhealthy"`
	JSON                      attackMitigationJSON `json:"-"`
}

type AttackMitigationParam struct {
	// When enabled, automatically mitigate random-prefix attacks to protect upstream
	// DNS servers
	Enabled param.Field[bool] `json:"enabled"`
	// Only mitigate attacks when upstream servers seem unhealthy
	OnlyWhenUpstreamUnhealthy param.Field[bool] `json:"only_when_upstream_unhealthy"`
}

type AuditLog = shared.AuditLog

type AuditLogAction = shared.AuditLogAction

type AuditLogActor = shared.AuditLogActor

type AuditLogActorType = shared.AuditLogActorType

type AuditLogOwner = shared.AuditLogOwner

type AuditLogResource = shared.AuditLogResource

type CertificateCA = shared.CertificateCA

type CertificateRequestType = shared.CertificateRequestType

type CloudflareTunnel = shared.CloudflareTunnel

type CloudflareTunnelConfigSrc = shared.CloudflareTunnelConfigSrc

type CloudflareTunnelConnection = shared.CloudflareTunnelConnection

type CloudflareTunnelStatus = shared.CloudflareTunnelStatus

type CloudflareTunnelTunType = shared.CloudflareTunnelTunType

type DNSFirewallDeleteParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
}

type DNSFirewallDeleteResponse struct {
	// Identifier.
	ID   string                        `json:"id"`
	JSON dnsFirewallDeleteResponseJSON `json:"-"`
}

type DNSFirewallDeleteResponseEnvelope struct {
	Errors   []DNSFirewallDeleteResponseEnvelopeErrors   `json:"errors,required"`
	Messages []DNSFirewallDeleteResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success DNSFirewallDeleteResponseEnvelopeSuccess `json:"success,required"`
	Result  DNSFirewallDeleteResponse                `json:"result"`
	JSON    dnsFirewallDeleteResponseEnvelopeJSON    `json:"-"`
}

type DNSFirewallDeleteResponseEnvelopeErrors struct {
	Code             int64                                         `json:"code,required"`
	Message          string                                        `json:"message,required"`
	DocumentationURL string                                        `json:"documentation_url"`
	Source           DNSFirewallDeleteResponseEnvelopeErrorsSource `json:"source"`
	JSON             dnsFirewallDeleteResponseEnvelopeErrorsJSON   `json:"-"`
}

type DNSFirewallDeleteResponseEnvelopeErrorsSource struct {
	Pointer string                                            `json:"pointer"`
	JSON    dnsFirewallDeleteResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type DNSFirewallDeleteResponseEnvelopeMessages struct {
	Code             int64                                           `json:"code,required"`
	Message          string                                          `json:"message,required"`
	DocumentationURL string                                          `json:"documentation_url"`
	Source           DNSFirewallDeleteResponseEnvelopeMessagesSource `json:"source"`
	JSON             dnsFirewallDeleteResponseEnvelopeMessagesJSON   `json:"-"`
}

type DNSFirewallDeleteResponseEnvelopeMessagesSource struct {
	Pointer string                                              `json:"pointer"`
	JSON    dnsFirewallDeleteResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type DNSFirewallDeleteResponseEnvelopeSuccess bool

type DNSFirewallEditParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// Attack mitigation settings
	AttackMitigation param.Field[AttackMitigationParam] `json:"attack_mitigation"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests param.Field[bool] `json:"deprecate_any_requests"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback param.Field[bool] `json:"ecs_fallback"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL param.Field[float64] `json:"maximum_cache_ttl"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL param.Field[float64] `json:"minimum_cache_ttl"`
	// DNS Firewall cluster name
	Name param.Field[string] `json:"name"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL param.Field[float64] `json:"negative_cache_ttl"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit param.Field[float64] `json:"ratelimit"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries     param.Field[float64]            `json:"retries"`
	UpstreamIPs param.Field[[]UpstreamIPsParam] `json:"upstream_ips" format:"ipv4"`
}

type DNSFirewallEditResponse struct {
	// Identifier.
	ID string `json:"id,required"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests bool          `json:"deprecate_any_requests,required"`
	DNSFirewallIPs       []FirewallIPs `json:"dns_firewall_ips,required" format:"ipv4"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback bool `json:"ecs_fallback,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL float64 `json:"maximum_cache_ttl,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL float64 `json:"minimum_cache_ttl,required"`
	// Last modification of DNS Firewall cluster
	ModifiedOn time.Time `json:"modified_on,required" format:"date-time"`
	// DNS Firewall cluster name
	Name string `json:"name,required"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL float64 `json:"negative_cache_ttl,required,nullable"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit float64 `json:"ratelimit,required,nullable"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries     float64       `json:"retries,required"`
	UpstreamIPs []UpstreamIPs `json:"upstream_ips,required" format:"ipv4"`
	// Attack mitigation settings
	AttackMitigation AttackMitigation            `json:"attack_mitigation,nullable"`
	JSON             dnsFirewallEditResponseJSON `json:"-"`
}

type DNSFirewallEditResponseEnvelope struct {
	Errors   []DNSFirewallEditResponseEnvelopeErrors   `json:"errors,required"`
	Messages []DNSFirewallEditResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success DNSFirewallEditResponseEnvelopeSuccess `json:"success,required"`
	Result  DNSFirewallEditResponse                `json:"result"`
	JSON    dnsFirewallEditResponseEnvelopeJSON    `json:"-"`
}

type DNSFirewallEditResponseEnvelopeErrors struct {
	Code             int64                                       `json:"code,required"`
	Message          string                                      `json:"message,required"`
	DocumentationURL string                                      `json:"documentation_url"`
	Source           DNSFirewallEditResponseEnvelopeErrorsSource `json:"source"`
	JSON             dnsFirewallEditResponseEnvelopeErrorsJSON   `json:"-"`
}

type DNSFirewallEditResponseEnvelopeErrorsSource struct {
	Pointer string                                          `json:"pointer"`
	JSON    dnsFirewallEditResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type DNSFirewallEditResponseEnvelopeMessages struct {
	Code             int64                                         `json:"code,required"`
	Message          string                                        `json:"message,required"`
	DocumentationURL string                                        `json:"documentation_url"`
	Source           DNSFirewallEditResponseEnvelopeMessagesSource `json:"source"`
	JSON             dnsFirewallEditResponseEnvelopeMessagesJSON   `json:"-"`
}

type DNSFirewallEditResponseEnvelopeMessagesSource struct {
	Pointer string                                            `json:"pointer"`
	JSON    dnsFirewallEditResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type DNSFirewallEditResponseEnvelopeSuccess bool

type DNSFirewallGetParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
}

type DNSFirewallGetResponse struct {
	// Identifier.
	ID string `json:"id,required"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests bool          `json:"deprecate_any_requests,required"`
	DNSFirewallIPs       []FirewallIPs `json:"dns_firewall_ips,required" format:"ipv4"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback bool `json:"ecs_fallback,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL float64 `json:"maximum_cache_ttl,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL float64 `json:"minimum_cache_ttl,required"`
	// Last modification of DNS Firewall cluster
	ModifiedOn time.Time `json:"modified_on,required" format:"date-time"`
	// DNS Firewall cluster name
	Name string `json:"name,required"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL float64 `json:"negative_cache_ttl,required,nullable"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit float64 `json:"ratelimit,required,nullable"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries     float64       `json:"retries,required"`
	UpstreamIPs []UpstreamIPs `json:"upstream_ips,required" format:"ipv4"`
	// Attack mitigation settings
	AttackMitigation AttackMitigation           `json:"attack_mitigation,nullable"`
	JSON             dnsFirewallGetResponseJSON `json:"-"`
}

type DNSFirewallGetResponseEnvelope struct {
	Errors   []DNSFirewallGetResponseEnvelopeErrors   `json:"errors,required"`
	Messages []DNSFirewallGetResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success DNSFirewallGetResponseEnvelopeSuccess `json:"success,required"`
	Result  DNSFirewallGetResponse                `json:"result"`
	JSON    dnsFirewallGetResponseEnvelopeJSON    `json:"-"`
}

type DNSFirewallGetResponseEnvelopeErrors struct {
	Code             int64                                      `json:"code,required"`
	Message          string                                     `json:"message,required"`
	DocumentationURL string                                     `json:"documentation_url"`
	Source           DNSFirewallGetResponseEnvelopeErrorsSource `json:"source"`
	JSON             dnsFirewallGetResponseEnvelopeErrorsJSON   `json:"-"`
}

type DNSFirewallGetResponseEnvelopeErrorsSource struct {
	Pointer string                                         `json:"pointer"`
	JSON    dnsFirewallGetResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type DNSFirewallGetResponseEnvelopeMessages struct {
	Code             int64                                        `json:"code,required"`
	Message          string                                       `json:"message,required"`
	DocumentationURL string                                       `json:"documentation_url"`
	Source           DNSFirewallGetResponseEnvelopeMessagesSource `json:"source"`
	JSON             dnsFirewallGetResponseEnvelopeMessagesJSON   `json:"-"`
}

type DNSFirewallGetResponseEnvelopeMessagesSource struct {
	Pointer string                                           `json:"pointer"`
	JSON    dnsFirewallGetResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type DNSFirewallGetResponseEnvelopeSuccess bool

type DNSFirewallListParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// Page number of paginated results
	Page param.Field[float64] `query:"page"`
	// Number of clusters per page
	PerPage param.Field[float64] `query:"per_page"`
}

type DNSFirewallListResponse struct {
	// Identifier.
	ID string `json:"id,required"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests bool          `json:"deprecate_any_requests,required"`
	DNSFirewallIPs       []FirewallIPs `json:"dns_firewall_ips,required" format:"ipv4"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback bool `json:"ecs_fallback,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL float64 `json:"maximum_cache_ttl,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL float64 `json:"minimum_cache_ttl,required"`
	// Last modification of DNS Firewall cluster
	ModifiedOn time.Time `json:"modified_on,required" format:"date-time"`
	// DNS Firewall cluster name
	Name string `json:"name,required"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL float64 `json:"negative_cache_ttl,required,nullable"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit float64 `json:"ratelimit,required,nullable"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries     float64       `json:"retries,required"`
	UpstreamIPs []UpstreamIPs `json:"upstream_ips,required" format:"ipv4"`
	// Attack mitigation settings
	AttackMitigation AttackMitigation            `json:"attack_mitigation,nullable"`
	JSON             dnsFirewallListResponseJSON `json:"-"`
}

type DNSFirewallNewParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// DNS Firewall cluster name
	Name        param.Field[string]             `json:"name,required"`
	UpstreamIPs param.Field[[]UpstreamIPsParam] `json:"upstream_ips,required" format:"ipv4"`
	// Attack mitigation settings
	AttackMitigation param.Field[AttackMitigationParam] `json:"attack_mitigation"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests param.Field[bool] `json:"deprecate_any_requests"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback param.Field[bool] `json:"ecs_fallback"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL param.Field[float64] `json:"maximum_cache_ttl"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL param.Field[float64] `json:"minimum_cache_ttl"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL param.Field[float64] `json:"negative_cache_ttl"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit param.Field[float64] `json:"ratelimit"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries param.Field[float64] `json:"retries"`
}

type DNSFirewallNewResponse struct {
	// Identifier.
	ID string `json:"id,required"`
	// Whether to refuse to answer queries for the ANY type
	DeprecateAnyRequests bool          `json:"deprecate_any_requests,required"`
	DNSFirewallIPs       []FirewallIPs `json:"dns_firewall_ips,required" format:"ipv4"`
	// Whether to forward client IP (resolver) subnet if no EDNS Client Subnet is sent
	ECSFallback bool `json:"ecs_fallback,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets an upper bound on
	// this duration. For caching purposes, higher TTLs will be decreased to the
	// maximum value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	MaximumCacheTTL float64 `json:"maximum_cache_ttl,required"`
	// By default, Cloudflare attempts to cache responses for as long as indicated by
	// the TTL received from upstream nameservers. This setting sets a lower bound on
	// this duration. For caching purposes, lower TTLs will be increased to the minimum
	// value defined by this setting.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	//
	// Note that, even with this setting, there is no guarantee that a response will be
	// cached for at least the specified duration. Cached responses may be removed
	// earlier for capacity or other operational reasons.
	MinimumCacheTTL float64 `json:"minimum_cache_ttl,required"`
	// Last modification of DNS Firewall cluster
	ModifiedOn time.Time `json:"modified_on,required" format:"date-time"`
	// DNS Firewall cluster name
	Name string `json:"name,required"`
	// This setting controls how long DNS Firewall should cache negative responses
	// (e.g., NXDOMAIN) from the upstream servers.
	//
	// This setting does not affect the TTL value in the DNS response Cloudflare
	// returns to clients. Cloudflare will always forward the TTL value received from
	// upstream nameservers.
	NegativeCacheTTL float64 `json:"negative_cache_ttl,required,nullable"`
	// Ratelimit in queries per second per datacenter (applies to DNS queries sent to
	// the upstream nameservers configured on the cluster)
	Ratelimit float64 `json:"ratelimit,required,nullable"`
	// Number of retries for fetching DNS responses from upstream nameservers (not
	// counting the initial attempt)
	Retries     float64       `json:"retries,required"`
	UpstreamIPs []UpstreamIPs `json:"upstream_ips,required" format:"ipv4"`
	// Attack mitigation settings
	AttackMitigation AttackMitigation           `json:"attack_mitigation,nullable"`
	JSON             dnsFirewallNewResponseJSON `json:"-"`
}

type DNSFirewallNewResponseEnvelope struct {
	Errors   []DNSFirewallNewResponseEnvelopeErrors   `json:"errors,required"`
	Messages []DNSFirewallNewResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success DNSFirewallNewResponseEnvelopeSuccess `json:"success,required"`
	Result  DNSFirewallNewResponse                `json:"result"`
	JSON    dnsFirewallNewResponseEnvelopeJSON    `json:"-"`
}

type DNSFirewallNewResponseEnvelopeErrors struct {
	Code             int64                                      `json:"code,required"`
	Message          string                                     `json:"message,required"`
	DocumentationURL string                                     `json:"documentation_url"`
	Source           DNSFirewallNewResponseEnvelopeErrorsSource `json:"source"`
	JSON             dnsFirewallNewResponseEnvelopeErrorsJSON   `json:"-"`
}

type DNSFirewallNewResponseEnvelopeErrorsSource struct {
	Pointer string                                         `json:"pointer"`
	JSON    dnsFirewallNewResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type DNSFirewallNewResponseEnvelopeMessages struct {
	Code             int64                                        `json:"code,required"`
	Message          string                                       `json:"message,required"`
	DocumentationURL string                                       `json:"documentation_url"`
	Source           DNSFirewallNewResponseEnvelopeMessagesSource `json:"source"`
	JSON             dnsFirewallNewResponseEnvelopeMessagesJSON   `json:"-"`
}

type DNSFirewallNewResponseEnvelopeMessagesSource struct {
	Pointer string                                           `json:"pointer"`
	JSON    dnsFirewallNewResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type DNSFirewallNewResponseEnvelopeSuccess bool

type DNSFirewallService struct {
	Options    []option.RequestOption
	Analytics  *AnalyticsService
	ReverseDNS *ReverseDNSService
}

type Error = apierror.Error

type ErrorData = shared.ErrorData

type ErrorDataSource = shared.ErrorDataSource

type FirewallIPs = string

type Member = shared.Member

type MemberPoliciesAccess = shared.MemberPoliciesAccess

type MemberPoliciesPermissionGroup = shared.MemberPoliciesPermissionGroup

type MemberPoliciesPermissionGroupsMeta = shared.MemberPoliciesPermissionGroupsMeta

type MemberPoliciesResourceGroup = shared.MemberPoliciesResourceGroup

type MemberPoliciesResourceGroupsMeta = shared.MemberPoliciesResourceGroupsMeta

type MemberPoliciesResourceGroupsScope = shared.MemberPoliciesResourceGroupsScope

type MemberPoliciesResourceGroupsScopeObject = shared.MemberPoliciesResourceGroupsScopeObject

type MemberPolicy = shared.MemberPolicy

type MemberStatus = shared.MemberStatus

type MemberUser = shared.MemberUser

type Permission = shared.Permission

type PermissionGrant = shared.PermissionGrant

type PermissionGrantParam = shared.PermissionGrantParam

type RatePlan = shared.RatePlan

type RatePlanID = shared.RatePlanID

type RatePlanParam = shared.RatePlanParam

type ResponseInfo = shared.ResponseInfo

type ResponseInfoSource = shared.ResponseInfoSource

type ReverseDNSEditParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
	// Map of cluster IP addresses to PTR record contents
	PTR param.Field[map[string]string] `json:"ptr"`
}

type ReverseDNSEditResponse struct {
	// Map of cluster IP addresses to PTR record contents
	PTR  map[string]string          `json:"ptr,required"`
	JSON reverseDNSEditResponseJSON `json:"-"`
}

type ReverseDNSEditResponseEnvelope struct {
	Errors   []ReverseDNSEditResponseEnvelopeErrors   `json:"errors,required"`
	Messages []ReverseDNSEditResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success ReverseDNSEditResponseEnvelopeSuccess `json:"success,required"`
	Result  ReverseDNSEditResponse                `json:"result"`
	JSON    reverseDNSEditResponseEnvelopeJSON    `json:"-"`
}

type ReverseDNSEditResponseEnvelopeErrors struct {
	Code             int64                                      `json:"code,required"`
	Message          string                                     `json:"message,required"`
	DocumentationURL string                                     `json:"documentation_url"`
	Source           ReverseDNSEditResponseEnvelopeErrorsSource `json:"source"`
	JSON             reverseDNSEditResponseEnvelopeErrorsJSON   `json:"-"`
}

type ReverseDNSEditResponseEnvelopeErrorsSource struct {
	Pointer string                                         `json:"pointer"`
	JSON    reverseDNSEditResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type ReverseDNSEditResponseEnvelopeMessages struct {
	Code             int64                                        `json:"code,required"`
	Message          string                                       `json:"message,required"`
	DocumentationURL string                                       `json:"documentation_url"`
	Source           ReverseDNSEditResponseEnvelopeMessagesSource `json:"source"`
	JSON             reverseDNSEditResponseEnvelopeMessagesJSON   `json:"-"`
}

type ReverseDNSEditResponseEnvelopeMessagesSource struct {
	Pointer string                                           `json:"pointer"`
	JSON    reverseDNSEditResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type ReverseDNSEditResponseEnvelopeSuccess bool

type ReverseDNSGetParams struct {
	// Identifier.
	AccountID param.Field[string] `path:"account_id,required"`
}

type ReverseDNSGetResponse struct {
	// Map of cluster IP addresses to PTR record contents
	PTR  map[string]string         `json:"ptr,required"`
	JSON reverseDNSGetResponseJSON `json:"-"`
}

type ReverseDNSGetResponseEnvelope struct {
	Errors   []ReverseDNSGetResponseEnvelopeErrors   `json:"errors,required"`
	Messages []ReverseDNSGetResponseEnvelopeMessages `json:"messages,required"`
	// Whether the API call was successful.
	Success ReverseDNSGetResponseEnvelopeSuccess `json:"success,required"`
	Result  ReverseDNSGetResponse                `json:"result"`
	JSON    reverseDNSGetResponseEnvelopeJSON    `json:"-"`
}

type ReverseDNSGetResponseEnvelopeErrors struct {
	Code             int64                                     `json:"code,required"`
	Message          string                                    `json:"message,required"`
	DocumentationURL string                                    `json:"documentation_url"`
	Source           ReverseDNSGetResponseEnvelopeErrorsSource `json:"source"`
	JSON             reverseDNSGetResponseEnvelopeErrorsJSON   `json:"-"`
}

type ReverseDNSGetResponseEnvelopeErrorsSource struct {
	Pointer string                                        `json:"pointer"`
	JSON    reverseDNSGetResponseEnvelopeErrorsSourceJSON `json:"-"`
}

type ReverseDNSGetResponseEnvelopeMessages struct {
	Code             int64                                       `json:"code,required"`
	Message          string                                      `json:"message,required"`
	DocumentationURL string                                      `json:"documentation_url"`
	Source           ReverseDNSGetResponseEnvelopeMessagesSource `json:"source"`
	JSON             reverseDNSGetResponseEnvelopeMessagesJSON   `json:"-"`
}

type ReverseDNSGetResponseEnvelopeMessagesSource struct {
	Pointer string                                          `json:"pointer"`
	JSON    reverseDNSGetResponseEnvelopeMessagesSourceJSON `json:"-"`
}

type ReverseDNSGetResponseEnvelopeSuccess bool

type ReverseDNSService struct {
	Options []option.RequestOption
}

type Role = shared.Role

type RoleParam = shared.RoleParam

type RolePermissions = shared.RolePermissions

type RolePermissionsParam = shared.RolePermissionsParam

type SortDirection = shared.SortDirection

type Subscription = shared.Subscription

type SubscriptionFrequency = shared.SubscriptionFrequency

type SubscriptionParam = shared.SubscriptionParam

type SubscriptionState = shared.SubscriptionState

type Token = shared.Token

type TokenCondition = shared.TokenCondition

type TokenConditionCIDRList = shared.TokenConditionCIDRList

type TokenConditionCIDRListParam = shared.TokenConditionCIDRListParam

type TokenConditionParam = shared.TokenConditionParam

type TokenConditionRequestIP = shared.TokenConditionRequestIP

type TokenConditionRequestIPParam = shared.TokenConditionRequestIPParam

type TokenParam = shared.TokenParam

type TokenPolicy = shared.TokenPolicy

type TokenPolicyEffect = shared.TokenPolicyEffect

type TokenPolicyParam = shared.TokenPolicyParam

type TokenPolicyPermissionGroup = shared.TokenPolicyPermissionGroup

type TokenPolicyPermissionGroupParam = shared.TokenPolicyPermissionGroupParam

type TokenPolicyPermissionGroupsMeta = shared.TokenPolicyPermissionGroupsMeta

type TokenPolicyPermissionGroupsMetaParam = shared.TokenPolicyPermissionGroupsMetaParam

type TokenPolicyResourcesIAMResourcesTypeObjectNested = shared.TokenPolicyResourcesIAMResourcesTypeObjectNested

type TokenPolicyResourcesIAMResourcesTypeObjectNestedParam = shared.TokenPolicyResourcesIAMResourcesTypeObjectNestedParam

type TokenPolicyResourcesIAMResourcesTypeObjectString = shared.TokenPolicyResourcesIAMResourcesTypeObjectString

type TokenPolicyResourcesIAMResourcesTypeObjectStringParam = shared.TokenPolicyResourcesIAMResourcesTypeObjectStringParam

type TokenPolicyResourcesUnion = shared.TokenPolicyResourcesUnion

type TokenPolicyResourcesUnionParam = shared.TokenPolicyResourcesUnionParam

type TokenStatus = shared.TokenStatus

type TokenValue = shared.TokenValue

type UpstreamIPs = string

type UpstreamIPsParam = string