diff --git a/README.md b/README.md index b83746e..4dec908 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ AzureFirewallSubnet and GatewaySubnet will not contain any UDR (User Defined Rou This is designed to quickly deploy hub and spoke architecture in the azure and further security hardening would be recommend to add appropriate NSG rules to use this for any production workloads. -![hub-spoke-topology](https://github.com/kumarvna/terraform-azurerm-caf-virtual-network-hub/blob/master/azure-caf-hub-spoke-firewall.png) +![hub-spoke-topology](azure-caf-hub-spoke-firewall.png) Source: [Microsoft Azure Hub-Spoke Topology Documentation](https://docs.microsoft.com/en-us/azure/architecture/reference-architectures/hybrid-networking/hub-spoke) @@ -39,7 +39,7 @@ These types of resources are supported: ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # By default, this module will create a resource group, proivde the name here # to use an existing resource group, specify the existing resource group name, @@ -77,14 +77,14 @@ module "vnet-hub" { nsg_inbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["weballow", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], - ["weballow1", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], + ["ssh", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], + ["rdp", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], ] nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "300", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } @@ -104,7 +104,7 @@ module "vnet-hub" { nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "400", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } } @@ -206,7 +206,7 @@ This module supports enabling the service endpoint of your choosing under the vi ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # .... omitted @@ -234,7 +234,7 @@ This module supports enabling the service delegation of your choosing under the ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # .... omitted @@ -268,7 +268,7 @@ This module Enable or Disable network policies for the private link endpoint on ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # .... omitted @@ -298,7 +298,7 @@ This module Enable or Disable network policies for the private link service on t ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # .... omitted @@ -330,7 +330,7 @@ In the Source and Destination columns, `VirtualNetwork`, `AzureLoadBalancer`, an ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # .... omitted @@ -386,7 +386,7 @@ To define the firewall rules, use the input variables `firewall_application_rule ``` hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # ....omitted @@ -486,7 +486,7 @@ End Date of the Project|Date when this application, workload, or service is plan ```hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" create_resource_group = true # ... omitted @@ -570,7 +570,7 @@ Name | Description ## Authors -Module is maintained by [Kumaraswamy Vithanala](mailto:kumarvna@gmail.com) with the help from other awesome contributors. +Originally created by [Kumaraswamy Vithanala](mailto:kumarvna@gmail.com) ## Other resources diff --git a/examples/complete/README.md b/examples/complete/README.md index 7943048..e71edc0 100644 --- a/examples/complete/README.md +++ b/examples/complete/README.md @@ -11,7 +11,7 @@ This is designed to quickly deploy hub and spoke architecture in the azure and f ``` hcl module "vnet-hub" { source = "kumarvna/caf-virtual-network-hub/azurerm" - version = "1.0.0" + version = "2.0.0" # By default, this module will create a resource group, proivde the name here # to use an existing resource group, specify the existing resource group name, @@ -49,14 +49,14 @@ module "vnet-hub" { nsg_inbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["weballow", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], - ["weballow1", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], + ["ssh", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], + ["rdp", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], ] nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "300", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } @@ -76,7 +76,7 @@ module "vnet-hub" { nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "400", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } } diff --git a/examples/complete/main.tf b/examples/complete/main.tf index 0430846..f79d524 100644 --- a/examples/complete/main.tf +++ b/examples/complete/main.tf @@ -1,7 +1,7 @@ module "vnet-hub" { - // source = "kumarvna/caf-virtual-network-hub/azurerm" - // version = "1.0.0" - source = "../../" + source = "kumarvna/caf-virtual-network-hub/azurerm" + version = "2.0.0" + # By default, this module will create a resource group, proivde the name here # to use an existing resource group, specify the existing resource group name, # and set the argument to `create_resource_group = false`. Location will be same as existing RG. @@ -38,14 +38,14 @@ module "vnet-hub" { nsg_inbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["weballow", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], - ["weballow1", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], + ["ssh", "100", "Inbound", "Allow", "Tcp", "22", "*", ""], + ["rdp", "200", "Inbound", "Allow", "Tcp", "3389", "*", ""], ] nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "300", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } @@ -65,7 +65,7 @@ module "vnet-hub" { nsg_outbound_rules = [ # [name, priority, direction, access, protocol, destination_port_range, source_address_prefix, destination_address_prefix] # To use defaults, use "" without adding any value and to use this subnet as a source or destination prefix. - ["ntp_out", "100", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], + ["ntp_out", "400", "Outbound", "Allow", "Udp", "123", "", "0.0.0.0/0"], ] } }