Links

firewall_rule

Type representing a IonosCloud firewall rule.

Parameters:

Name
Required
Description
name
true
The name of the firewall rule.

Properties:

Name
Required
Description
ensure
No
The basic property that the resource should be in. Valid values are present, absent.
source_mac
No
Only traffic originating from the respective MAC address is allowed. Valid format: aa:bb:cc:dd:ee:ff.
source_ip
No
Only traffic originating from the respective IPv4 address is allowed.
target_ip
No
In case the target NIC has multiple IP addresses, only traffic directed to the respective IP address of the NIC is allowed.
port_range_start
No
Defines the start range of the allowed port (from 1 to 65534) if protocol TCP or UDP is chosen.
port_range_end
No
Defines the end range of the allowed port (from 1 to 65534) if the protocol TCP or UDP is chosen.
icmp_type
No
Defines the allowed type (from 0 to 254) if the protocol ICMP is chosen.
icmp_code
No
Defines the allowed code (from 0 to 254) if protocol ICMP is chosen.
type
No
The type of firewall rule. If is not specified, it will take the default value INGRESS.
protocol
No
The protocol for the firewall rule. Valid values are TCP, UDP, ICMP, ANY.
datacenter_id
No
The ID of the virtual data center where the NIC will reside.
datacenter_name
No
The name of the virtual data center where the NIC will reside.
server_id
No
The server ID the NIC will be attached to.
server_name
No
The server name the NIC will be attached to.
nic_id
No
The NIC ID the NIC will be attached to.
nic_name
No
The name of the NIC the firewall rule will be added to.
id
No
The Firewall Rule ID.
***

Changeable properties:

  • icmp_code
  • icmp_type
  • port_range_start
  • port_range_end
  • source_mac
  • source_ip
  • target_ip
  • type

Examples

To list resources:

puppet resource firewall_rule
NOTE: If two resources have the same name only one of them will be shown.

To create, update or delete a resource:

$datacenter_name = 'MyDataCenter'
$server_name = 'worker4'
$nic = 'testnic3'
firewall_rule { 'SSH':
ensure => 'present',
datacenter_name => 'MyDataCenter',
nic_name => 'testnic3',
port_range_end => 29,
port_range_start => 22,
protocol => 'TCP',
provider => 'v1',
server_name => 'worker4',
type => 'INGRESS',
}
NOTE: If two resources with the same name ar found an error will be thrown, this only applies to cases where the resource cannot be identified. Example: an error is thrown for two servers with the same name in the same datacenter, not for two servers with the same name, but in different datacenters.
Last modified 8mo ago