File tree Expand file tree Collapse file tree 1 file changed +12
-3
lines changed Expand file tree Collapse file tree 1 file changed +12
-3
lines changed Original file line number Diff line number Diff line change @@ -245,26 +245,31 @@ resource "cloudstack_network_acl_rule" "foo" {
245
245
acl_id = cloudstack_network_acl.foo.id
246
246
247
247
rule {
248
+ rule_number = 10
248
249
action = "allow"
249
250
cidr_list = ["172.18.100.0/24"]
250
251
protocol = "all"
251
252
traffic_type = "ingress"
253
+ description = "Allow all traffic"
252
254
}
253
255
254
256
rule {
257
+ rule_number = 20
255
258
action = "allow"
256
259
cidr_list = ["172.18.100.0/24"]
257
260
protocol = "icmp"
258
261
icmp_type = "-1"
259
262
icmp_code = "-1"
260
263
traffic_type = "ingress"
264
+ description = "Allow ICMP traffic"
261
265
}
262
266
263
267
rule {
264
268
cidr_list = ["172.16.100.0/24"]
265
269
protocol = "tcp"
266
270
ports = ["80", "443"]
267
271
traffic_type = "ingress"
272
+ description = "Allow HTTP and HTTPS"
268
273
}
269
274
}`
270
275
@@ -293,27 +298,31 @@ resource "cloudstack_network_acl_rule" "foo" {
293
298
}
294
299
295
300
rule {
301
+ rule_number = 10
296
302
action = "deny"
297
- cidr_list = ["172.18.100.0/24", "172.18.101.0/24"]
303
+ cidr_list = ["172.18.100.0/24", "172.18.101.0/24"]
298
304
protocol = "icmp"
299
305
icmp_type = "-1"
300
306
icmp_code = "-1"
301
307
traffic_type = "ingress"
308
+ description = "Deny ICMP traffic"
302
309
}
303
310
304
311
rule {
305
- action = "allow"
312
+ rule_number = 20
313
+ action = "allow"
306
314
cidr_list = ["172.18.100.0/24"]
307
315
protocol = "tcp"
308
316
ports = ["80", "443"]
309
317
traffic_type = "ingress"
310
318
}
311
319
312
320
rule {
313
- action = "deny"
321
+ action = "deny"
314
322
cidr_list = ["10.0.0.0/24"]
315
323
protocol = "tcp"
316
324
ports = ["80", "1000-2000"]
317
325
traffic_type = "egress"
326
+ description = "Deny specific TCP ports"
318
327
}
319
328
}`
You can’t perform that action at this time.
0 commit comments