ipsec-tunnel-tf-module

A Terraform module for deploying a an IPSec tunnel VPC.

Usage

module "ipsec_tunnel" {
  source = "github.com/cisagov/ipsec-tunnel-tf-module"

  aws_region            = "us-west-1"
  aws_availability_zone = "b"
  remote_cidr_blocks    = ["10.10.11.0/24"]
  remote_ip             = "1.2.3.4"
  route_table_ids       = ["rtb-0123456789abcdef0", "rtb-0123456789abcdef1"]
  vpc_id                = "vpc-0123456789abcdef0"

  tags = {
    Key1 = "Value1"
    Key2 = "Value2"
  }
}

Examples

Basic usage

Requirements

Name	Version
terraform	~> 1.0
aws	~> 4.9

Providers

Name	Version
aws	~> 4.9

Modules

No modules.

Resources

Name	Type
aws_customer_gateway.the_customer_gateway	resource
aws_vpn_connection.the_vpn_connection	resource
aws_vpn_connection_route.the_vpn_route	resource
aws_vpn_gateway.the_vpn_gateway	resource
aws_vpn_gateway_attachment.vpn_vpc_attachment	resource
aws_vpn_gateway_route_propagation.the_route_propagation	resource

Inputs

Name	Description	Type	Default	Required
aws_availability_zone	The AWS availability zone where the Virtual Private Gateway is to be deployed (e.g. a, b, c, etc.).	`string`	n/a	yes
aws_region	The AWS region where the Virtual Private Gateway is to be deployed (e.g. us-east-1).	`string`	n/a	yes
remote_bgp_asn	The BGP ASN of the remote (non-AWS) end of the tunnel (e.g. 11111). This value is not used if static_routes_only is true.	`number`	`65000`	no
remote_cidr_blocks	A list of CIDR blocks associated with the remote (non-AWS) end of the tunnel (e.g. [192.168.11.0/24, 10.10.11.0/24]).	`list(string)`	n/a	yes
remote_ip	The public IP of the remote (non-AWS) end of the tunnel (e.g. 1.2.3.4).	`string`	n/a	yes
route_table_ids	A list of ID corresponding to route tables that should route traffic through the VPN/IPSec gateway (e.g. [rtb-0123456789abcdef0, rtb-0123456789abcdef1]).	`list(string)`	n/a	yes
static_routes_only	A boolean value indicating whether the VPN connection uses static routes exclusively. Static routes must be used for devices that don't support BGP.	`bool`	`true`	no
vpc_id	The ID of the AWS VPC where the Virtual private Gateway is to be deployed (e.g. vpc-0123456789abcdef0).	`string`	n/a	yes

Outputs

Name	Description
remote_gateway_configuration	The configuration information for the VPN connection's remote (non-AWS) gateway, in XML format.

Notes

Running pre-commit requires running terraform init in every directory that contains Terraform code. In this repository, these are the main directory and every directory under examples/.

Contributing

We welcome contributions! Please see CONTRIBUTING.md for details.

License

This project is in the worldwide public domain.

This project is in the public domain within the United States, and copyright and related rights in the work worldwide are waived through the CC0 1.0 Universal public domain dedication.

All contributions to this project will be released under the CC0 dedication. By submitting a pull request, you are agreeing to comply with this waiver of copyright interest.

cisagov / ipsec-tunnel-tf-module Goto Github PK