blob: 200e7dfd7cd905444fbec3531d5c1c74961b1f8c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
|
resource "azurerm_network_security_group" "VyOS" {
name = join("-", [var.prefix, "VyOS", "SG"])
location = var.location
resource_group_name = var.resource_group
tags = var.tags
# For SSH Traffic
security_rule {
name = "SSH"
priority = 101
direction = "Inbound"
access = "Allow"
protocol = "Tcp"
source_port_range = "*"
destination_port_range = "22"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For Wireguard Traffic
security_rule {
name = "Wireguard"
priority = 102
direction = "Inbound"
access = "Allow"
protocol = "Udp"
source_port_range = "*"
destination_port_range = "51820"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For OpenVPN Traffic
security_rule {
name = "OpenVPN"
priority = 103
direction = "Inbound"
access = "Allow"
protocol = "Udp"
source_port_range = "*"
destination_port_range = "1194"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For ESP Traffic
security_rule {
name = "ESP"
priority = 104
direction = "Inbound"
access = "Allow"
protocol = "Esp"
source_port_range = "*"
destination_port_range = "*"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For IKE Traffic
security_rule {
name = "IKE"
priority = 105
direction = "Inbound"
access = "Allow"
protocol = "Udp"
source_port_range = "*"
destination_port_range = "500"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For IPSEC Traffic
security_rule {
name = "IPSEC"
priority = 106
direction = "Inbound"
access = "Allow"
protocol = "Udp"
source_port_range = "*"
destination_port_range = "1701"
source_address_prefix = "*"
destination_address_prefix = "*"
}
# For NAT Traversal
security_rule {
name = "NAT_Traversal"
priority = 107
direction = "Inbound"
access = "Allow"
protocol = "Udp"
source_port_range = "*"
destination_port_range = "4500"
source_address_prefix = "*"
destination_address_prefix = "*"
}
}
|
