Skip to main content

Palo Alto Networks VNet Peering Module for Azure

A terraform module for deploying a Virtual Network Peering and its components required for the VM-Series firewalls in Azure.

GitHub Logo Terraform Logo

Usage

For usage refer to any example module.

Reference

Requirements

NameVersion
terraform>= 1.2, < 2.0
azurerm~> 3.25

Providers

NameVersion
azurerm~> 3.25

Modules

No modules.

Resources

NameType
azurerm_virtual_network_peering.localresource
azurerm_virtual_network_peering.remoteresource
azurerm_virtual_network.local_peerdata source
azurerm_virtual_network.remote_peerdata source

Inputs

NameDescriptionTypeDefaultRequired
name_prefixPrefix name appended to the peering names.string""no
local_peer_configA map that contains the local peer configuration.
Mandatory Values:
- vnet_name - (string, required) the local peer VNET name.
- resource_group_name - (string, required) : the resource group name of the local peer<br />- allow_virtual_network_access - (bool, optional, defaults to true) : allows communication between the two peering VNETs
- allow_forwarded_traffic - (bool, optional, defaults to true) : allows traffic forwarded from the remote VNET but not originated from within it
- allow_gateway_transit - (bool, optional, defaults to false) : controls the learning of routes from local VNET (gateway or route server) into the remote VNET. Must be true if use_remote_gateways is true for remote peer
- use_remote_gateways - (bool, optional, defaults to false) : controls the learning of routes from the remote VNET (gateway or route server) into the local VNET
- name - (string, optional, defaults to <var.name_prefix><var.local_peer_config.vnet_name>-to-<var.remote_peer_config.vnet_name>) : the name of the local VNET peering
map(any)n/ayes
remote_peer_configA map that contains the remote peer configuration.
Mandatory Values :
- vnet_name - (string, required) : the remote peer VNET name.
- resource_group_name - (string, required) : the resource group name of the remote peer<br />- allow_virtual_network_access - (bool, optional, defaults to true) : allows communication between the two peering VNETs
- allow_forwarded_traffic - (bool, optional, defaults to true) : allows traffic forwarded from the local VNET but not originated from within it
- allow_gateway_transit - (bool, optional, defaults to false) : controls the learning of routes from remote VNET (gateway or route server) into the local VNET. Must be true if use_remote_gateways is true for local peer
- use_remote_gateways - (bool, optional, defaults to false) : controls the learning of routes from the local VNET (gateway or route server) into the remote VNET
- name - (string, optional, defaults to <var.name_prefix><var.remote_peer_config.vnet_name>-to-<var.local_peer_config.vnet_name>) : the name of the local VNET peering
map(any)n/ayes

Outputs

NameDescription
local_peering_nameThe name of the local VNET peering.
remote_peering_nameThe name of the remote VNET peering.
local_peering_idThe ID of the local VNET peering.
remote_peering_idThe ID of the remote VNET peering.