From f2938470778c498563150709c11d8ea6f0b18d24 Mon Sep 17 00:00:00 2001 From: Simone Ruffilli Date: Tue, 12 Dec 2023 14:09:58 +0100 Subject: [PATCH] can_ip_forward in simple-nva examples (#1922) --- modules/cloud-config-container/simple-nva/README.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/modules/cloud-config-container/simple-nva/README.md b/modules/cloud-config-container/simple-nva/README.md index 3fb279c80..1e180fb94 100644 --- a/modules/cloud-config-container/simple-nva/README.md +++ b/modules/cloud-config-container/simple-nva/README.md @@ -7,6 +7,7 @@ This NVAs can be used to interconnect up to 8 VPCs. The NVAs run [Container-Optimized OS (COS)](https://cloud.google.com/container-optimized-os/docs). COS is a Linux-based OS designed for running containers. By default, it only allows SSH ingress connections. To see the exact host firewall configuration, run `sudo iptables -L -v`. More info available in the [official](https://cloud.google.com/container-optimized-os/docs/how-to/firewall) documentation. To configure the firewall, you can either + - use the [open_ports](variables.tf#L84) variable - for a thiner grain control, pass a custom bash script at startup with iptables commands @@ -55,6 +56,7 @@ module "vm" { zone = "europe-west8-b" name = "cos-nva" network_interfaces = local.network_interfaces + can_ip_forward = true metadata = { user-data = module.cos-nva.cloud_config google-logging-enabled = true @@ -75,7 +77,7 @@ module "vm" { The sample code brings up [FRRouting](https://frrouting.org/) container. -``` +```conf # tftest-file id=frr_conf path=./frr.conf # Example frr.conmf file @@ -86,7 +88,7 @@ router bgp 65001 line vty ``` -Following code assumes a file in the same folder named frr.conf exists. +Following code assumes a file in the same folder named frr.conf exists. ```hcl locals { @@ -126,6 +128,7 @@ module "vm" { zone = "europe-west8-b" name = "cos-nva" network_interfaces = local.network_interfaces + can_ip_forward = true metadata = { user-data = module.cos-nva.cloud_config google-logging-enabled = true