mirror of
https://github.com/google/nomulus
synced 2026-04-29 20:37:13 +00:00
86 lines
2.1 KiB
HCL
86 lines
2.1 KiB
HCL
resource "google_compute_global_address" "proxy_ipv4_address" {
|
|
name = "proxy-ipv4-address${var.suffix}"
|
|
ip_version = "IPV4"
|
|
}
|
|
|
|
resource "google_compute_global_address" "proxy_ipv6_address" {
|
|
name = "proxy-ipv6-address${var.suffix}"
|
|
ip_version = "IPV6"
|
|
}
|
|
|
|
resource "google_compute_firewall" "proxy_firewall" {
|
|
name = "proxy-firewall${var.suffix}"
|
|
network = "default"
|
|
|
|
allow {
|
|
protocol = "tcp"
|
|
|
|
ports = [
|
|
var.proxy_ports["epp"],
|
|
var.proxy_ports["health_check"],
|
|
]
|
|
}
|
|
|
|
source_ranges = [
|
|
"130.211.0.0/22",
|
|
"35.191.0.0/16",
|
|
]
|
|
|
|
target_tags = [
|
|
"proxy-cluster",
|
|
]
|
|
}
|
|
|
|
resource "google_compute_health_check" "proxy_health_check" {
|
|
name = "proxy-health-check${var.suffix}"
|
|
|
|
tcp_health_check {
|
|
port = var.proxy_ports["health_check"]
|
|
request = "HEALTH_CHECK_REQUEST"
|
|
response = "HEALTH_CHECK_RESPONSE"
|
|
}
|
|
}
|
|
|
|
resource "google_compute_backend_service" "epp_backend_service" {
|
|
name = "epp-backend-service${var.suffix}"
|
|
protocol = "TCP"
|
|
timeout_sec = 3600
|
|
port_name = "epp${var.suffix}"
|
|
|
|
backend {
|
|
group = var.proxy_instance_groups["americas"]
|
|
}
|
|
|
|
backend {
|
|
group = var.proxy_instance_groups["emea"]
|
|
}
|
|
|
|
backend {
|
|
group = var.proxy_instance_groups["apac"]
|
|
}
|
|
|
|
health_checks = [
|
|
google_compute_health_check.proxy_health_check.self_link,
|
|
]
|
|
}
|
|
|
|
resource "google_compute_target_tcp_proxy" "epp_tcp_proxy" {
|
|
name = "epp-tcp-proxy${var.suffix}"
|
|
proxy_header = "PROXY_V1"
|
|
backend_service = google_compute_backend_service.epp_backend_service.self_link
|
|
}
|
|
|
|
resource "google_compute_global_forwarding_rule" "epp_ipv4_forwarding_rule" {
|
|
name = "epp-ipv4-forwarding-rule${var.suffix}"
|
|
ip_address = google_compute_global_address.proxy_ipv4_address.address
|
|
target = google_compute_target_tcp_proxy.epp_tcp_proxy.self_link
|
|
port_range = "700"
|
|
}
|
|
|
|
resource "google_compute_global_forwarding_rule" "epp_ipv6_forwarding_rule" {
|
|
name = "epp-ipv6-forwarding-rule${var.suffix}"
|
|
ip_address = google_compute_global_address.proxy_ipv6_address.address
|
|
target = google_compute_target_tcp_proxy.epp_tcp_proxy.self_link
|
|
port_range = "700"
|
|
}
|