Adds bfd and md5 auth support to google_compute_router_peer (#2142)
* Adds support for md5 auth to net-vlan-attachment * Adds support for md5 auth to net-ipsec-over-interconnect * Adds support for md5 auth to net-vpn-ha * Adds support for BFD to net-vpn-ha
This commit is contained in:
Simone Ruffilli
@@ -47,6 +47,60 @@ module "example-va" {
|
||||
# tftest modules=1 resources=4
|
||||
```
|
||||
|
||||
### Dedicated Interconnect - Single VLAN Attachment (No SLA) - BFD and MD5 Auth
|
||||
|
||||
```hcl
|
||||
resource "google_compute_router" "interconnect-router" {
|
||||
name = "interconnect-router"
|
||||
network = "mynet"
|
||||
project = "myproject"
|
||||
region = "europe-west8"
|
||||
bgp {
|
||||
advertise_mode = "CUSTOM"
|
||||
asn = 64514
|
||||
advertised_groups = ["ALL_SUBNETS"]
|
||||
advertised_ip_ranges {
|
||||
range = "10.255.255.0/24"
|
||||
}
|
||||
advertised_ip_ranges {
|
||||
range = "192.168.255.0/24"
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
module "example-va" {
|
||||
source = "./fabric/modules/net-vlan-attachment"
|
||||
network = "mynet"
|
||||
project_id = "myproject"
|
||||
region = "europe-west8"
|
||||
name = "vlan-attachment"
|
||||
description = "Example vlan attachment"
|
||||
peer_asn = "65000"
|
||||
router_config = {
|
||||
create = false
|
||||
name = google_compute_router.interconnect-router.name
|
||||
bfd = {
|
||||
min_receive_interval = 1000
|
||||
min_transmit_interval = 1000
|
||||
multiplier = 5
|
||||
session_initialization_mode = "ACTIVE"
|
||||
}
|
||||
md5_authentication_key = {
|
||||
name = "foo"
|
||||
key = "bar"
|
||||
}
|
||||
}
|
||||
dedicated_interconnect_config = {
|
||||
bandwidth = "BPS_10G"
|
||||
bgp_range = "169.254.0.0/30"
|
||||
interconnect = "interconnect-a"
|
||||
vlan_tag = 12345
|
||||
}
|
||||
}
|
||||
|
||||
# tftest modules=1 resources=4
|
||||
```
|
||||
|
||||
### Partner Interconnect - Single VLAN Attachment (No SLA)
|
||||
|
||||
```hcl
|
||||
@@ -434,7 +488,7 @@ module "example-va-b-ew12" {
|
||||
# tftest modules=4 resources=6
|
||||
```
|
||||
|
||||
### IPSec for Dedicated Interconnect
|
||||
### IPSec for Dedicated Interconnect
|
||||
|
||||
Refer to the [HA VPN over Interconnect Blueprint](../../blueprints/networking/ha-vpn-over-interconnect/) for an all-encompassing example.
|
||||
|
||||
@@ -495,7 +549,7 @@ module "example-va-b" {
|
||||
# tftest modules=2 resources=9
|
||||
```
|
||||
|
||||
### IPSec for Partner Interconnect
|
||||
### IPSec for Partner Interconnect
|
||||
|
||||
```hcl
|
||||
module "example-va-a" {
|
||||
@@ -533,10 +587,7 @@ module "example-va-b" {
|
||||
}
|
||||
# tftest modules=2 resources=6
|
||||
```
|
||||
|
||||
|
||||
<!-- BEGIN TFDOC -->
|
||||
|
||||
## Variables
|
||||
|
||||
| name | description | type | required | default |
|
||||
@@ -547,14 +598,14 @@ module "example-va-b" {
|
||||
| [peer_asn](variables.tf#L74) | The on-premises underlay router ASN. | <code>string</code> | ✓ | |
|
||||
| [project_id](variables.tf#L79) | The project id where resources are created. | <code>string</code> | ✓ | |
|
||||
| [region](variables.tf#L84) | The region where resources are created. | <code>string</code> | ✓ | |
|
||||
| [router_config](variables.tf#L89) | Cloud Router configuration for the VPN. If you want to reuse an existing router, set create to false and use name to specify the desired router. | <code title="object({ create = optional(bool, true) asn = optional(number, 65001) name = optional(string, "router") keepalive = optional(number) custom_advertise = optional(object({ all_subnets = bool ip_ranges = map(string) })) bfd = optional(object({ session_initialization_mode = optional(string, "ACTIVE") min_receive_interval = optional(number) min_transmit_interval = optional(number) multiplier = optional(number) })) })">object({…})</code> | ✓ | |
|
||||
| [router_config](variables.tf#L89) | Cloud Router configuration for the VPN. If you want to reuse an existing router, set create to false and use name to specify the desired router. | <code title="object({ create = optional(bool, true) asn = optional(number, 65001) bfd = optional(object({ min_receive_interval = optional(number) min_transmit_interval = optional(number) multiplier = optional(number) session_initialization_mode = optional(string, "ACTIVE") })) custom_advertise = optional(object({ all_subnets = bool ip_ranges = map(string) })) md5_authentication_key = optional(object({ name = string key = string })) keepalive = optional(number) name = optional(string, "router") })">object({…})</code> | ✓ | |
|
||||
| [admin_enabled](variables.tf#L17) | Whether the VLAN attachment is enabled. | <code>bool</code> | | <code>true</code> |
|
||||
| [dedicated_interconnect_config](variables.tf#L23) | Partner interconnect configuration. | <code title="object({ bandwidth = optional(string, "BPS_10G") bgp_range = optional(string, "169.254.128.0/29") interconnect = string vlan_tag = string })">object({…})</code> | | <code>null</code> |
|
||||
| [ipsec_gateway_ip_ranges](variables.tf#L40) | IPSec Gateway IP Ranges. | <code>map(string)</code> | | <code>{}</code> |
|
||||
| [mtu](variables.tf#L46) | The MTU associated to the VLAN attachment (1440 / 1500). | <code>number</code> | | <code>1500</code> |
|
||||
| [partner_interconnect_config](variables.tf#L62) | Partner interconnect configuration. | <code title="object({ edge_availability_domain = string })">object({…})</code> | | <code>null</code> |
|
||||
| [vlan_tag](variables.tf#L110) | The VLAN id to be used for this VLAN attachment. | <code>number</code> | | <code>null</code> |
|
||||
| [vpn_gateways_ip_range](variables.tf#L116) | The IP range (cidr notation) to be used for the GCP VPN gateways. If null IPSec over Interconnect is not enabled. | <code>string</code> | | <code>null</code> |
|
||||
| [vlan_tag](variables.tf#L114) | The VLAN id to be used for this VLAN attachment. | <code>number</code> | | <code>null</code> |
|
||||
| [vpn_gateways_ip_range](variables.tf#L120) | The IP range (cidr notation) to be used for the GCP VPN gateways. If null IPSec over Interconnect is not enabled. | <code>string</code> | | <code>null</code> |
|
||||
|
||||
## Outputs
|
||||
|
||||
@@ -567,5 +618,4 @@ module "example-va-b" {
|
||||
| [router](outputs.tf#L37) | Router resource (only if auto-created). | |
|
||||
| [router_interface](outputs.tf#L42) | Router interface created for the VLAN attachment. | |
|
||||
| [router_name](outputs.tf#L47) | Router name. | |
|
||||
|
||||
<!-- END TFDOC -->
|
||||
|
||||
Reference in New Issue
Block a user