2017-01-18 15:43:09 +01:00
|
|
|
---
|
|
|
|
layout: "profitbricks"
|
|
|
|
page_title: "ProfitBricks: profitbricks_firewall"
|
2017-01-26 18:28:01 +01:00
|
|
|
sidebar_current: "docs-profitbricks-resource-firewall"
|
2017-01-18 15:43:09 +01:00
|
|
|
description: |-
|
|
|
|
Creates and manages Firewall Rules.
|
|
|
|
---
|
|
|
|
|
|
|
|
# profitbricks\_firewall
|
|
|
|
|
|
|
|
Manages a Firewall Rules on ProfitBricks
|
|
|
|
|
|
|
|
## Example Usage
|
|
|
|
|
|
|
|
```
|
|
|
|
resource "profitbricks_firewall" "example" {
|
|
|
|
datacenter_id = "${profitbricks_datacenter.example.id}"
|
|
|
|
server_id = "${profitbricks_server.example.id}"
|
|
|
|
nic_id = "${profitbricks_server.example.primary_nic}"
|
|
|
|
protocol = "TCP"
|
|
|
|
name = "test"
|
|
|
|
port_range_start = 1
|
|
|
|
port_range_end = 2
|
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
####Argument reference
|
|
|
|
|
|
|
|
* `datacenter_id` - (Required)[string]
|
|
|
|
* `server_id` - (Required)[string]
|
|
|
|
* `nic_id` - (Required)[string]
|
|
|
|
* `protocol` - (Required)[string] The protocol for the rule: TCP, UDP, ICMP, ANY.
|
|
|
|
* `name` - (Optional)[string] The name of the firewall rule.
|
|
|
|
* `source_mac` - (Optional)[string] Only traffic originating from the respective MAC address is allowed. Valid format: aa:bb:cc:dd:ee:ff.
|
|
|
|
* `source_ip` - (Optional)[string] Only traffic originating from the respective IPv4 address is allowed.
|
|
|
|
* `target_ip` - (Optional)[string] Only traffic directed to the respective IP address of the NIC is allowed.
|
|
|
|
* `port_range_start` - (Optional)[string] Defines the start range of the allowed port (from 1 to 65534) if protocol TCP or UDP is chosen.
|
|
|
|
* `port_range_end` - (Optional)[string] Defines the end range of the allowed port (from 1 to 65534) if the protocol TCP or UDP is chosen.
|
|
|
|
* `icmp_type` - (Optional)[string] Defines the allowed type (from 0 to 254) if the protocol ICMP is chosen.
|
|
|
|
* `icmp_code` - (Optional)[string] Defines the allowed code (from 0 to 254) if protocol ICMP is chosen.
|
|
|
|
|