terraform-provider-binarylane/docs/resources/server_firewall_rules.md

page_title, subcategory, description

page_title	subcategory	description
binarylane_server_firewall_rules Resource - terraform-provider-binarylane		Retrieve details about the External Firewall Rules assigned to a BinaryLane server.

binarylane_server_firewall_rules (Resource)

Retrieve details about the External Firewall Rules assigned to a BinaryLane server.

Example Usage

resource "binarylane_server" "example" {
  # ...
}

resource "binarylane_server_firewall_rules" "example" {
  server_id = binarylane_server.example.id
  firewall_rules = [
    {
      description           = "Allow SSH"
      protocol              = "tcp"
      source_addresses      = ["0.0.0.0/0"]
      destination_addresses = [binarylane_server.example.private_ipv4_addresses.0]
      destination_ports     = ["22"]
      action                = "accept"
    }
  ]
}

Schema

Required

• firewall_rules (Attributes List) A list of rules for the server. NB: that any existing rules that are not included will be removed. Submit an empty list to clear all rules. (see below for nested schema)
• server_id (Number) The ID of the server for which firewall rules should be listed.

Nested Schema for firewall_rules

Required:

• action (String) The action to take when there is a match on this rule.

Value	Description
drop	Traffic matching this rule will be dropped.
accept	Traffic matching this rule will be accepted.

• destination_addresses (List of String) The destination addresses to match for this rule. Each address may be an individual IPv4 address or a range in IPv4 CIDR notation.
• protocol (String) The protocol to match for this rule.

Value	Description
all	This rule will match any protocol.
icmp	This rule will match ICMP traffic only.
tcp	This rule will match TCP traffic only.
udp	This rule will match UDP traffic only.

• source_addresses (List of String) The source addresses to match for this rule. Each address may be an individual IPv4 address or a range in IPv4 CIDR notation.

Optional:

• description (String) A description to assist in identifying this rule. Commonly used to record the reason for the rule or the intent behind it, e.g. "Block access to RDP" or "Allow access from HQ".
• destination_ports (List of String) The destination ports to match for this rule. Leave null or empty to match on all ports.

Import

Import is supported using the following syntax:

The terraform import command can be used, for example:

terraform import binarylane_server_firewall_rules.example "<server name or id>"