Palo Alto Networks VNet Peering Module for Azure

A terraform module for deploying a Virtual Network Peering and its components required for the VM-Series firewalls in Azure.

Usage

For usage refer to any example module.

Reference

Requirements

Name	Version
terraform	>= 1.2, < 2.0
azurerm	~> 3.25

Providers

Name	Version
azurerm	~> 3.25

Modules

No modules.

Resources

Name	Type
azurerm_virtual_network_peering.local	resource
azurerm_virtual_network_peering.remote	resource
azurerm_virtual_network.local_peer	data source
azurerm_virtual_network.remote_peer	data source

Inputs

Name	Description	Type	Default	Required
name_prefix	Prefix name appended to the peering names.	string	""	no
local_peer_config	A map that contains the local peer configuration. Mandatory Values: - vnet_name - (string, required) the local peer VNET name. - resource_group_name - (string, required) : the resource group name of the local peer<br />- allow_virtual_network_access - (bool, optional, defaults to true) : allows communication between the two peering VNETs - allow_forwarded_traffic - (bool, optional, defaults to true) : allows traffic forwarded from the remote VNET but not originated from within it - allow_gateway_transit - (bool, optional, defaults to false) : controls the learning of routes from local VNET (gateway or route server) into the remote VNET. Must be true if use_remote_gateways is true for remote peer - use_remote_gateways - (bool, optional, defaults to false) : controls the learning of routes from the remote VNET (gateway or route server) into the local VNET - name - (string, optional, defaults to <var.name_prefix><var.local_peer_config.vnet_name>-to-<var.remote_peer_config.vnet_name>) : the name of the local VNET peering	map(any)	n/a	yes
remote_peer_config	A map that contains the remote peer configuration. Mandatory Values : - vnet_name - (string, required) : the remote peer VNET name. - resource_group_name - (string, required) : the resource group name of the remote peer<br />- allow_virtual_network_access - (bool, optional, defaults to true) : allows communication between the two peering VNETs - allow_forwarded_traffic - (bool, optional, defaults to true) : allows traffic forwarded from the local VNET but not originated from within it - allow_gateway_transit - (bool, optional, defaults to false) : controls the learning of routes from remote VNET (gateway or route server) into the local VNET. Must be true if use_remote_gateways is true for local peer - use_remote_gateways - (bool, optional, defaults to false) : controls the learning of routes from the local VNET (gateway or route server) into the remote VNET - name - (string, optional, defaults to <var.name_prefix><var.remote_peer_config.vnet_name>-to-<var.local_peer_config.vnet_name>) : the name of the local VNET peering	map(any)	n/a	yes

Outputs

Name	Description
local_peering_name	The name of the local VNET peering.
remote_peering_name	The name of the remote VNET peering.
local_peering_id	The ID of the local VNET peering.
remote_peering_id	The ID of the remote VNET peering.