You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+10-9Lines changed: 10 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -43,15 +43,16 @@ Expected network connectivity downtime of typically around 20 seconds.
43
43
*[management-vpc](./modules/management-vpc)
44
44
*[workload-vpc](./modules/workload-vpc)
45
45
*[Examples](./examples)
46
-
* <divstyle="display: inline-block;"><ahref="./examples/basic">Basic Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-basic-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/basic"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
47
-
* <divstyle="display: inline-block;"><ahref="./examples/existing_vpc">Existing networking resources Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-existing_vpc-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/existing_vpc"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
48
-
* <divstyle="display: inline-block;"><ahref="./examples/hub-spoke-delegated-resolver">Hub and Spoke VPC Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-hub-spoke-delegated-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-delegated-resolver"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
49
-
* <divstyle="display: inline-block;"><ahref="./examples/hub-spoke-manual-resolver">Hub and Spoke VPC with manual DNS resolver Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-hub-spoke-manual-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-manual-resolver"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
50
-
* <divstyle="display: inline-block;"><ahref="./examples/landing_zone">Landing Zone example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-landing_zone-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/landing_zone"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
51
-
* <divstyle="display: inline-block;"><ahref="./examples/multiple-sg-protocols">Multiple Security Group Protocols Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-multiple-sg-protocols-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/multiple-sg-protocols"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
52
-
* <divstyle="display: inline-block;"><ahref="./examples/specific-zone-only">Specific Zone Only Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-specific-zone-only-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/specific-zone-only"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
53
-
* <divstyle="display: inline-block;"><ahref="./examples/vpc-flow-logs">VPC with Flow Logs stored in COS Example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-vpc-flow-logs-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/vpc-flow-logs"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
54
-
* <divstyle="display: inline-block;"><ahref="./examples/vpc-with-dns">VPC with DNS example</a></div> <divstyle="display: inline-block; vertical-align: middle;"><ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=lzv-vpc-with-dns-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/vpc-with-dns"target="_blank"><imgsrc="https://cloud.ibm.com/media/docs/images/icons/Deploy_to_cloud.svg"alt="Deploy to IBM Cloud button"></a></div>
46
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
47
+
* <ahref="./examples/basic">Basic Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-basic-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/basic"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
48
+
* <ahref="./examples/existing_vpc">Existing networking resources Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-existing_vpc-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/existing_vpc"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
49
+
* <ahref="./examples/hub-spoke-delegated-resolver">Hub and Spoke VPC Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-hub-spoke-delegated-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-delegated-resolver"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
50
+
* <ahref="./examples/hub-spoke-manual-resolver">Hub and Spoke VPC with manual DNS resolver Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-hub-spoke-manual-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-manual-resolver"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
51
+
* <ahref="./examples/landing_zone">Landing Zone example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-landing_zone-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/landing_zone"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
52
+
* <ahref="./examples/multiple-sg-protocols">Multiple Security Group Protocols Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-multiple-sg-protocols-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/multiple-sg-protocols"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
53
+
* <ahref="./examples/specific-zone-only">Specific Zone Only Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-specific-zone-only-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/specific-zone-only"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
54
+
* <ahref="./examples/vpc-flow-logs">VPC with Flow Logs stored in COS Example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-vpc-flow-logs-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/vpc-flow-logs"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
55
+
* <ahref="./examples/vpc-with-dns">VPC with DNS example</a> <ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-vpc-with-dns-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/vpc-with-dns"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom; margin-left: 5px;"></a>
Copy file name to clipboardExpand all lines: examples/basic/README.md
+9Lines changed: 9 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,10 @@
1
1
# Basic Example
2
2
3
+
<!-- BEGIN SCHEMATICS DEPLOY HOOK -->
4
+
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-basic-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/basic"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
A simple example to provision a Secure Landing Zone (SLZ) Virtual Private Cloud (VPC).
4
9
5
10
The following resources are provisioned by this example:
@@ -8,3 +13,7 @@ The following resources are provisioned by this example:
8
13
* An IBM Virtual Private Cloud (VPC) with:
9
14
* Publicly exposed subnet.
10
15
* Custom security group rules.
16
+
17
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
18
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-existing_vpc-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/existing_vpc"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
This example demonstrate how to configure the module without creating new resources.
4
9
5
10
It configures existing VPC, existing subnets and an existing Public Gateway.
11
+
12
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
13
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
Copy file name to clipboardExpand all lines: examples/hub-spoke-delegated-resolver/README.md
+9Lines changed: 9 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,10 @@
1
1
# Hub and Spoke VPC Example
2
2
3
+
<!-- BEGIN SCHEMATICS DEPLOY HOOK -->
4
+
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-hub-spoke-delegated-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-delegated-resolver"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
This example demonstrates how to deploy hub and spoke VPCs, inclusive of enabling DNS-sharing. See [About DNS sharing for VPE gateways](https://cloud.ibm.com/docs/vpc?topic=vpc-vpe-dns-sharing) and [hub and spoke communication](https://cloud.ibm.com/docs/solution-tutorials?topic=solution-tutorials-vpc-transit1) for details.
4
9
- The 2 VPCs are connected through a transit gateway.
5
10
- The hub VPC is configured with a custom resolver.
@@ -13,3 +18,7 @@ This example demonstrates how to deploy hub and spoke VPCs, inclusive of enablin
13
18
2. The second terraform apply should have the update_delegated_resolver variable to true to configure the DNS resolver to be delegated ```terraform apply -var=update_delegated_resolver=true```
14
19
15
20
You may also be interested in the [Hub and Spoke VPC with manual DNS resolver Example](../hub-spoke-manual-resolver/) which does not exhibit those issues.
21
+
22
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
23
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
# Hub and Spoke VPC with manual DNS resolver Example
2
2
3
+
<!-- BEGIN SCHEMATICS DEPLOY HOOK -->
4
+
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-hub-spoke-manual-resolver-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/hub-spoke-manual-resolver"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
This example demonstrates how to deploy hub and spoke VPCs, inclusive of enabling DNS-sharing using a manual DNS resolver in the spoke VPC (as opposed to a delegated resolver).
4
9
5
10
Caveat: Using a manual resolver, as opposed to a delegated resolver requires to ensure that the custom resolver IPs in the hub VPC do not change outside the terraform lifecycle (which should be the case if you follow a proper IaC approach).
6
11
7
12
Refer to the documentation [here](../hub-spoke-delegated-resolver/) if you are new to hub-spoke dns-sharing VPC topology.
13
+
14
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
15
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
Copy file name to clipboardExpand all lines: examples/landing_zone/README.md
+9Lines changed: 9 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,10 @@
1
1
# Landing Zone example
2
2
3
+
<!-- BEGIN SCHEMATICS DEPLOY HOOK -->
4
+
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-landing_zone-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/landing_zone"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
This example demonstrates how to use the management and workload VPC [modules](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/modules) to create a network VPC topology that is aligned with the network segregation key principles of the IBM Cloud [Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-vpc-architecture-connectivity-overview).
4
9
5
10
The example shows how to use the base modules to create the following topology:
@@ -8,3 +13,7 @@ The example shows how to use the base modules to create the following topology:
8
13
- A transit gateway that connects the two VPCs
9
14
10
15
:exclamation:**Important:** The topology created in this example does not meet all compliance controls for the IBM Cloud Framework for Financial Services. Use the [terraform-ibm-landing-zone](https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone) module to create a fully compliant stack.
16
+
17
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
18
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
Copy file name to clipboardExpand all lines: examples/multiple-sg-protocols/README.md
+9Lines changed: 9 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,5 +1,10 @@
1
1
# Multiple Security Group Protocols Example
2
2
3
+
<!-- BEGIN SCHEMATICS DEPLOY HOOK -->
4
+
<ahref="https://cloud.ibm.com/schematics/workspaces/create?workspace_name=landing-zone-vpc-multiple-sg-protocols-example&repository=https://github.com/terraform-ibm-modules/terraform-ibm-landing-zone-vpc/tree/main/examples/multiple-sg-protocols"><imgsrc="https://img.shields.io/badge/Deploy%20with IBM%20Cloud%20Schematics-0f62fe?logo=ibm&logoColor=white&labelColor=0f62fe"alt="Deploy with IBM Cloud Schematics"style="height: 16px; vertical-align: text-bottom;"></a>
5
+
<!-- END SCHEMATICS DEPLOY HOOK -->
6
+
7
+
3
8
This example demonstrates how to configure multiple security group rules with different protocols for the same source CIDR with the module.
4
9
5
10
**Note:** IBM Cloud VPC security group rules do not support specifying multiple protocols in a single rule. When you need to allow traffic from the same source using different protocols (e.g., TCP, UDP, ICMP), you must create separate security group rules for each protocol. This example shows the correct approach to handle this requirement.
@@ -16,3 +21,7 @@ The following resources are provisioned by this example:
16
21
* DNS (UDP port 53)
17
22
* ICMP Echo (ping)
18
23
*[Optional] Commented code to demonstrate a Security Group rule that allows all inbound traffic from anywhere to anywhere on _all ports_ for ipv4. If you uncomment that code, it would make the rest of the Security Group rules redundant.
24
+
25
+
<!-- BEGIN SCHEMATICS DEPLOY TIP HOOK -->
26
+
:information_source: Ctrl/Cmd+Click or right-click on the Schematics deploy button to open in a new tab
0 commit comments