github.com/atsaki/terraform@v0.4.3-0.20150919165407-25bba5967654/website/source/docs/providers/cloudstack/r/egress_firewall.html.markdown (about)

     1  ---
     2  layout: "cloudstack"
     3  page_title: "CloudStack: cloudstack_egress_firewall"
     4  sidebar_current: "docs-cloudstack-resource-egress-firewall"
     5  description: |-
     6    Creates egress firewall rules for a given network.
     7  ---
     8  
     9  # cloudstack\_egress\_firewall
    10  
    11  Creates egress firewall rules for a given network.
    12  
    13  ## Example Usage
    14  
    15  ```
    16  resource "cloudstack_egress_firewall" "default" {
    17    network = "test-network"
    18  
    19    rule {
    20      source_cidr = "10.0.0.0/8"
    21      protocol = "tcp"
    22      ports = ["80", "1000-2000"]
    23    }
    24  }
    25  ```
    26  
    27  ## Argument Reference
    28  
    29  The following arguments are supported:
    30  
    31  * `network` - (Required) The network for which to create the egress firewall
    32      rules. Changing this forces a new resource to be created.
    33  
    34  * `managed` - (Optional) USE WITH CAUTION! If enabled all the egress firewall
    35      rules for this network will be managed by this resource. This means it will
    36      delete all firewall rules that are not in your config! (defaults false)
    37  
    38  * `rule` - (Optional) Can be specified multiple times. Each rule block supports
    39      fields documented below. If `managed = false` at least one rule is required!
    40  
    41  The `rule` block supports:
    42  
    43  * `source_cidr` - (Required) The source CIDR to allow access to the given ports.
    44  
    45  * `protocol` - (Required) The name of the protocol to allow. Valid options are:
    46      `tcp`, `udp` and `icmp`.
    47  
    48  * `icmp_type` - (Optional) The ICMP type to allow. This can only be specified if
    49      the protocol is ICMP.
    50  
    51  * `icmp_code` - (Optional) The ICMP code to allow. This can only be specified if
    52      the protocol is ICMP.
    53  
    54  * `ports` - (Optional) List of ports and/or port ranges to allow. This can only
    55      be specified if the protocol is TCP or UDP.
    56  
    57  ## Attributes Reference
    58  
    59  The following attributes are exported:
    60  
    61  * `id` - The network ID for which the egress firewall rules are created.