2014-08-26 21:50:29 +00:00
|
|
|
---
|
|
|
|
layout: "google"
|
|
|
|
page_title: "Google: google_compute_firewall"
|
|
|
|
sidebar_current: "docs-google-resource-firewall"
|
2014-10-22 03:21:56 +00:00
|
|
|
description: |-
|
|
|
|
Manages a firewall resource within GCE.
|
2014-08-26 21:50:29 +00:00
|
|
|
---
|
|
|
|
|
|
|
|
# google\_compute\_firewall
|
|
|
|
|
|
|
|
Manages a firewall resource within GCE.
|
|
|
|
|
|
|
|
## Example Usage
|
|
|
|
|
|
|
|
```
|
|
|
|
resource "google_compute_firewall" "default" {
|
|
|
|
name = "test"
|
|
|
|
network = "${google_compute_network.other.name}"
|
|
|
|
|
|
|
|
allow {
|
|
|
|
protocol = "icmp"
|
|
|
|
}
|
|
|
|
|
|
|
|
allow {
|
|
|
|
protocol = "tcp"
|
|
|
|
ports = ["80", "8080", "1000-2000"]
|
|
|
|
}
|
|
|
|
|
|
|
|
source_tags = ["web"]
|
|
|
|
}
|
|
|
|
```
|
|
|
|
|
|
|
|
## Argument Reference
|
|
|
|
|
|
|
|
The following arguments are supported:
|
|
|
|
|
|
|
|
* `name` - (Required) A unique name for the resource, required by GCE.
|
|
|
|
Changing this forces a new resource to be created.
|
|
|
|
|
|
|
|
* `network` - (Required) The name of the network to attach this firewall to.
|
|
|
|
|
|
|
|
* `allow` - (Required) Can be specified multiple times for each allow
|
|
|
|
rule. Each allow block supports fields documented below.
|
|
|
|
|
2015-01-12 20:10:13 +00:00
|
|
|
* `source_ranges` - (Optional) An array of source CIDR ranges that this
|
2014-08-26 21:50:29 +00:00
|
|
|
firewall applies to.
|
|
|
|
|
2015-01-12 20:10:13 +00:00
|
|
|
* `source_tags` - (Optional) An array of source tags that this firewall applies to.
|
2014-09-27 19:42:46 +00:00
|
|
|
|
2015-01-12 20:10:13 +00:00
|
|
|
* `target_tags` - (Optional) An array of target tags that this firewall applies to.
|
2014-08-26 21:50:29 +00:00
|
|
|
|
|
|
|
The `allow` block supports:
|
|
|
|
|
|
|
|
* `protocol` - (Required) The name of the protocol to allow.
|
|
|
|
|
2015-01-12 20:10:13 +00:00
|
|
|
* `ports` - (Optional) Array of ports and/or port ranges to allow. This can
|
2014-08-26 21:50:29 +00:00
|
|
|
only be specified if the protocol is TCP or UDP.
|
|
|
|
|
|
|
|
## Attributes Reference
|
|
|
|
|
|
|
|
The following attributes are exported:
|
|
|
|
|
|
|
|
* `name` - The name of the resource.
|
|
|
|
* `network` - The network that this resource is attached to.
|
|
|
|
* `source_ranges` - The CIDR block ranges this firewall applies to.
|
|
|
|
* `source_tags` - The tags that this firewall applies to.
|