Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Customer Gateway: you can either create a new CGW or use an existing one #2

Open
wants to merge 4 commits into
base: master
Choose a base branch
from
Open

Customer Gateway: you can either create a new CGW or use an existing one #2

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
c0792e4
Allow not only create a CGW but alos to use existing CGW
trungnguyen Jun 15, 2017
7bd7f03
Use 65000 a the default value for bgp_asn
trungnguyen Jun 15, 2017
46f1205
Update README.md
trungnguyen Jun 15, 2017
416832d
Update README>md
trungnguyen Jun 15, 2017
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 22 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,8 +8,11 @@ Module Input Variables

- `name` - Unique name used to label the VPN Gateway and Customer Gateway.
- `vpn_gateway_id` - VPN Gateway to associate with Customer Gateway and VPN Connection.
- `ip_address` - The IP address of the gateway's Internet-routable external interface.
- `bgp_asn` - BGP Autonomous System Number. If BGP is not in use, then by convention set this value to 65000.
- Customer Gateway (CGW): you can use an existing CGW or you can create a new CGW
- To use existing CGW: pass the CGW ID in `customer_gateway_id`. In this case `ip_address` and `bagp_asn` are not relevant and not used
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

fix spelling in bgp_asn

- To create a new CGW: leave `customer_gateway_id` as "", and specify 2 variables below:
- `ip_address` - The IP address of the gateway's Internet-routable external interface.
- `bgp_asn` - BGP Autonomous System Number. If BGP is not in use, then by convention set this value to 65000.
- `destination_cidr_blocks` - A comma separated list of CIDR blocks which sit behind the Customer Gateway device and should be routed over the VPN connection.
- `route_table_ids` - (optional) A comma separated list of route tables ids. This must be provided if you plan to create static routes for the destination_cidr_blocks in each route table.
- `route_table_count` - (optional) The total number of tables in the route_table_ids list. This must be provided if route_table_ids is set. This is necessary since value of `count` cannot be computed in modules.
Expand Down Expand Up @@ -61,6 +64,23 @@ module "stockholm_cgw" {
destination_cidr_blocks = ["10.1.1.0/24", "10.100.1.0/24"]
}

# Or if you want to use existing CGW...
/*
module "stockholm_cgw" {
source = "github.com/terraform-community-modules/tf_aws_customer_gw"

name = "stockholm"

vpn_gateway_id = "${module.vpn.vgw_id}"
customer_gateway_id = "<pass the CGW ID e.g. from a data block>"
static_routes_only = true

add_static_routes_to_tables = true
route_table_ids = "${concat(module.public_subnet.public_route_table_ids, module.private_subnet.private_route_table_ids)}"
route_table_count = 6
destination_cidr_blocks = ["10.1.1.0/24", "10.100.1.0/24"]
}
*/


```
Expand Down
3 changes: 2 additions & 1 deletion main.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
resource "aws_customer_gateway" "default" {
count = "${var.customer_gateway_id == "" ? 1 : 0}"
bgp_asn = "${var.bgp_asn}"
ip_address = "${var.ip_address}"
type = "ipsec.1"
Expand All @@ -14,7 +15,7 @@ resource "aws_customer_gateway" "default" {

resource "aws_vpn_connection" "default" {
vpn_gateway_id = "${var.vpn_gateway_id}"
customer_gateway_id = "${aws_customer_gateway.default.id}"
customer_gateway_id = "${var.customer_gateway_id == "" ? join("", aws_customer_gateway.default.*.id) : var.customer_gateway_id}"
type = "ipsec.1"
static_routes_only = "${var.static_routes_only}"

Expand Down
11 changes: 9 additions & 2 deletions vars.tf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,12 +6,19 @@ variable "vpn_gateway_id" {
description = "Specify which VPN Gateway the Customer Gateway will be associated with."
}

variable "customer_gateway_id" {
description = "The CGW Id to be used to form the VPN connection. If not specified a new CGW is created"
default = ""
}

variable "ip_address" {
description = "IP address of the Customer Gateway external interface."
description = "IP address of the Customer Gateway external interface. Not used if customer_gateway_id is specified"
default = ""
}

variable "bgp_asn" {
description = "BGP ASN of the Customer Gateway. By convention, use 65000 if you are not running BGP."
description = "BGP ASN of the Customer Gateway. By convention, use 65000 if you are not running BGP. Not used if customer_gateway_id is specified"
default = 65000
}

variable "destination_cidr_blocks" {
Expand Down