import * as pulumi from "@pulumi/pulumi"; /** * Provides a resource to manage vpn connection * ## Example Usage * * ```typescript * import * as pulumi from "@pulumi/pulumi"; * import * as volcengine from "@volcengine/pulumi"; * * const fooVpc = new volcengine.vpc.Vpc("fooVpc", { * vpcName: "acc-test-vpc", * cidrBlock: "172.16.0.0/16", * }); * const fooSubnet = new volcengine.vpc.Subnet("fooSubnet", { * subnetName: "acc-test-subnet", * cidrBlock: "172.16.0.0/24", * zoneId: "cn-beijing-a", * vpcId: fooVpc.id, * }); * const fooGateway = new volcengine.vpn.Gateway("fooGateway", { * vpcId: fooVpc.id, * subnetId: fooSubnet.id, * bandwidth: 20, * vpnGatewayName: "acc-test", * description: "acc-test", * period: 2, * projectName: "default", * }); * const fooCustomerGateway = new volcengine.vpn.CustomerGateway("fooCustomerGateway", { * ipAddress: "192.0.1.3", * customerGatewayName: "acc-test", * description: "acc-test", * projectName: "default", * }); * const fooConnection = new volcengine.vpn.Connection("fooConnection", { * vpnConnectionName: "acc-tf-test", * description: "acc-tf-test", * vpnGatewayId: fooGateway.id, * customerGatewayId: fooCustomerGateway.id, * localSubnets: ["192.168.0.0/22"], * remoteSubnets: ["192.161.0.0/20"], * dpdAction: "none", * natTraversal: true, * ikeConfigPsk: "acctest@!3", * ikeConfigVersion: "ikev1", * ikeConfigMode: "main", * ikeConfigEncAlg: "aes", * ikeConfigAuthAlg: "md5", * ikeConfigDhGroup: "group2", * ikeConfigLifetime: 9000, * ikeConfigLocalId: "acc_test", * ikeConfigRemoteId: "acc_test", * ipsecConfigEncAlg: "aes", * ipsecConfigAuthAlg: "sha256", * ipsecConfigDhGroup: "group2", * ipsecConfigLifetime: 9000, * projectName: "default", * }); * ``` * * ## Import * * VpnConnection can be imported using the id, e.g. * * ```sh * $ pulumi import volcengine:vpn/connection:Connection default vgc-3tex2x1cwd4c6c0v**** * ``` */ export declare class Connection extends pulumi.CustomResource { /** * Get an existing Connection resource's state with the given name, ID, and optional extra * properties used to qualify the lookup. * * @param name The _unique_ name of the resulting resource. * @param id The _unique_ provider ID of the resource to lookup. * @param state Any extra arguments used during the lookup. * @param opts Optional settings to control the behavior of the CustomResource. */ static get(name: string, id: pulumi.Input, state?: ConnectionState, opts?: pulumi.CustomResourceOptions): Connection; /** * Returns true if the given object is an instance of Connection. This is designed to work even * when multiple copies of the Pulumi SDK have been loaded into the same process. */ static isInstance(obj: any): obj is Connection; /** * The account ID of the VPN connection. */ readonly accountId: pulumi.Output; /** * The IPsec attach status. */ readonly attachStatus: pulumi.Output; /** * The attach type of the VPN connection, the value can be `VpnGateway` or `TransitRouter`. */ readonly attachType: pulumi.Output; /** * The business status of IPsec connection, valid when the attach type is 'TransitRouter'. */ readonly businessStatus: pulumi.Output; /** * The connect status of the VPN connection. */ readonly connectStatus: pulumi.Output; /** * The create time of VPN connection. */ readonly creationTime: pulumi.Output; /** * The ID of the customer gateway. */ readonly customerGatewayId: pulumi.Output; /** * The delete time of resource, valid when the attach type is 'TransitRouter'. */ readonly deletedTime: pulumi.Output; /** * The description of the VPN connection. */ readonly description: pulumi.Output; /** * The dpd action of the VPN connection. */ readonly dpdAction: pulumi.Output; /** * The auth alg of the ike config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ readonly ikeConfigAuthAlg: pulumi.Output; /** * The dk group of the ike config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14`. The default value is `group2`. */ readonly ikeConfigDhGroup: pulumi.Output; /** * The enc alg of the ike config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ readonly ikeConfigEncAlg: pulumi.Output; /** * The lifetime of the ike config of the VPN connection. Value: 900~86400. */ readonly ikeConfigLifetime: pulumi.Output; /** * The localId of the ike config of the VPN connection. */ readonly ikeConfigLocalId: pulumi.Output; /** * The mode of the ike config of the VPN connection. Valid values are `main`, `aggressive`, and default value is `main`. */ readonly ikeConfigMode: pulumi.Output; /** * The psk of the ike config of the VPN connection. The length does not exceed 100 characters, and only uppercase and lowercase letters, special symbols and numbers are allowed. */ readonly ikeConfigPsk: pulumi.Output; /** * The remote id of the ike config of the VPN connection. */ readonly ikeConfigRemoteId: pulumi.Output; /** * The version of the ike config of the VPN connection. The value can be `ikev1` or `ikev2`. The default value is `ikev1`. */ readonly ikeConfigVersion: pulumi.Output; /** * The ip address of transit router, valid when the attach type is 'TransitRouter'. */ readonly ipAddress: pulumi.Output; /** * The auth alg of the ipsec config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ readonly ipsecConfigAuthAlg: pulumi.Output; /** * The dh group of the ipsec config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14` and `disable`. The default value is `group2`. */ readonly ipsecConfigDhGroup: pulumi.Output; /** * The enc alg of the ipsec config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ readonly ipsecConfigEncAlg: pulumi.Output; /** * The ipsec config of the ike config of the VPN connection. Value: 900~86400. */ readonly ipsecConfigLifetime: pulumi.Output; /** * The local subnet of the VPN connection. Up to 5 network segments are supported. */ readonly localSubnets: pulumi.Output; /** * Whether to enable connection logging. After enabling Connection Day, you can view and download IPsec connection logs, and use the log information to troubleshoot IPsec connection problems yourself. */ readonly logEnabled: pulumi.Output; /** * The nat traversal of the VPN connection. */ readonly natTraversal: pulumi.Output; /** * Whether to initiate negotiation mode immediately. */ readonly negotiateInstantly: pulumi.Output; /** * The overdue time of resource, valid when the attach type is 'TransitRouter'. */ readonly overdueTime: pulumi.Output; /** * The project name of the VPN connection. */ readonly projectName: pulumi.Output; /** * The remote subnet of the VPN connection. Up to 5 network segments are supported. */ readonly remoteSubnets: pulumi.Output; /** * The status of the VPN connection. */ readonly status: pulumi.Output; /** * The id of transit router, valid when the attach type is 'TransitRouter'. */ readonly transitRouterId: pulumi.Output; /** * The update time of VPN connection. */ readonly updateTime: pulumi.Output; /** * The ID of the VPN connection. */ readonly vpnConnectionId: pulumi.Output; /** * The name of the VPN connection. */ readonly vpnConnectionName: pulumi.Output; /** * The ID of the vpn gateway. If the `AttachType` is not passed or the passed value is `VpnGateway`, this parameter must be filled. If the value of `AttachType` is `TransitRouter`, this parameter does not need to be filled. */ readonly vpnGatewayId: pulumi.Output; /** * The zone id of transit router, valid when the attach type is 'TransitRouter'. */ readonly zoneId: pulumi.Output; /** * Create a Connection resource with the given unique name, arguments, and options. * * @param name The _unique_ name of the resource. * @param args The arguments to use to populate this resource's properties. * @param opts A bag of options that control this resource's behavior. */ constructor(name: string, args: ConnectionArgs, opts?: pulumi.CustomResourceOptions); } /** * Input properties used for looking up and filtering Connection resources. */ export interface ConnectionState { /** * The account ID of the VPN connection. */ accountId?: pulumi.Input; /** * The IPsec attach status. */ attachStatus?: pulumi.Input; /** * The attach type of the VPN connection, the value can be `VpnGateway` or `TransitRouter`. */ attachType?: pulumi.Input; /** * The business status of IPsec connection, valid when the attach type is 'TransitRouter'. */ businessStatus?: pulumi.Input; /** * The connect status of the VPN connection. */ connectStatus?: pulumi.Input; /** * The create time of VPN connection. */ creationTime?: pulumi.Input; /** * The ID of the customer gateway. */ customerGatewayId?: pulumi.Input; /** * The delete time of resource, valid when the attach type is 'TransitRouter'. */ deletedTime?: pulumi.Input; /** * The description of the VPN connection. */ description?: pulumi.Input; /** * The dpd action of the VPN connection. */ dpdAction?: pulumi.Input; /** * The auth alg of the ike config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ ikeConfigAuthAlg?: pulumi.Input; /** * The dk group of the ike config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14`. The default value is `group2`. */ ikeConfigDhGroup?: pulumi.Input; /** * The enc alg of the ike config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ ikeConfigEncAlg?: pulumi.Input; /** * The lifetime of the ike config of the VPN connection. Value: 900~86400. */ ikeConfigLifetime?: pulumi.Input; /** * The localId of the ike config of the VPN connection. */ ikeConfigLocalId?: pulumi.Input; /** * The mode of the ike config of the VPN connection. Valid values are `main`, `aggressive`, and default value is `main`. */ ikeConfigMode?: pulumi.Input; /** * The psk of the ike config of the VPN connection. The length does not exceed 100 characters, and only uppercase and lowercase letters, special symbols and numbers are allowed. */ ikeConfigPsk?: pulumi.Input; /** * The remote id of the ike config of the VPN connection. */ ikeConfigRemoteId?: pulumi.Input; /** * The version of the ike config of the VPN connection. The value can be `ikev1` or `ikev2`. The default value is `ikev1`. */ ikeConfigVersion?: pulumi.Input; /** * The ip address of transit router, valid when the attach type is 'TransitRouter'. */ ipAddress?: pulumi.Input; /** * The auth alg of the ipsec config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ ipsecConfigAuthAlg?: pulumi.Input; /** * The dh group of the ipsec config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14` and `disable`. The default value is `group2`. */ ipsecConfigDhGroup?: pulumi.Input; /** * The enc alg of the ipsec config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ ipsecConfigEncAlg?: pulumi.Input; /** * The ipsec config of the ike config of the VPN connection. Value: 900~86400. */ ipsecConfigLifetime?: pulumi.Input; /** * The local subnet of the VPN connection. Up to 5 network segments are supported. */ localSubnets?: pulumi.Input[]>; /** * Whether to enable connection logging. After enabling Connection Day, you can view and download IPsec connection logs, and use the log information to troubleshoot IPsec connection problems yourself. */ logEnabled?: pulumi.Input; /** * The nat traversal of the VPN connection. */ natTraversal?: pulumi.Input; /** * Whether to initiate negotiation mode immediately. */ negotiateInstantly?: pulumi.Input; /** * The overdue time of resource, valid when the attach type is 'TransitRouter'. */ overdueTime?: pulumi.Input; /** * The project name of the VPN connection. */ projectName?: pulumi.Input; /** * The remote subnet of the VPN connection. Up to 5 network segments are supported. */ remoteSubnets?: pulumi.Input[]>; /** * The status of the VPN connection. */ status?: pulumi.Input; /** * The id of transit router, valid when the attach type is 'TransitRouter'. */ transitRouterId?: pulumi.Input; /** * The update time of VPN connection. */ updateTime?: pulumi.Input; /** * The ID of the VPN connection. */ vpnConnectionId?: pulumi.Input; /** * The name of the VPN connection. */ vpnConnectionName?: pulumi.Input; /** * The ID of the vpn gateway. If the `AttachType` is not passed or the passed value is `VpnGateway`, this parameter must be filled. If the value of `AttachType` is `TransitRouter`, this parameter does not need to be filled. */ vpnGatewayId?: pulumi.Input; /** * The zone id of transit router, valid when the attach type is 'TransitRouter'. */ zoneId?: pulumi.Input; } /** * The set of arguments for constructing a Connection resource. */ export interface ConnectionArgs { /** * The attach type of the VPN connection, the value can be `VpnGateway` or `TransitRouter`. */ attachType?: pulumi.Input; /** * The ID of the customer gateway. */ customerGatewayId: pulumi.Input; /** * The description of the VPN connection. */ description?: pulumi.Input; /** * The dpd action of the VPN connection. */ dpdAction?: pulumi.Input; /** * The auth alg of the ike config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ ikeConfigAuthAlg?: pulumi.Input; /** * The dk group of the ike config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14`. The default value is `group2`. */ ikeConfigDhGroup?: pulumi.Input; /** * The enc alg of the ike config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ ikeConfigEncAlg?: pulumi.Input; /** * The lifetime of the ike config of the VPN connection. Value: 900~86400. */ ikeConfigLifetime?: pulumi.Input; /** * The localId of the ike config of the VPN connection. */ ikeConfigLocalId?: pulumi.Input; /** * The mode of the ike config of the VPN connection. Valid values are `main`, `aggressive`, and default value is `main`. */ ikeConfigMode?: pulumi.Input; /** * The psk of the ike config of the VPN connection. The length does not exceed 100 characters, and only uppercase and lowercase letters, special symbols and numbers are allowed. */ ikeConfigPsk: pulumi.Input; /** * The remote id of the ike config of the VPN connection. */ ikeConfigRemoteId?: pulumi.Input; /** * The version of the ike config of the VPN connection. The value can be `ikev1` or `ikev2`. The default value is `ikev1`. */ ikeConfigVersion?: pulumi.Input; /** * The auth alg of the ipsec config of the VPN connection. Valid value are `sha1`, `md5`, `sha256`, `sha384`, `sha512`, `sm3`. The default value is `sha1`. */ ipsecConfigAuthAlg?: pulumi.Input; /** * The dh group of the ipsec config of the VPN connection. Valid value are `group1`, `group2`, `group5`, `group14` and `disable`. The default value is `group2`. */ ipsecConfigDhGroup?: pulumi.Input; /** * The enc alg of the ipsec config of the VPN connection. Valid value are `aes`, `aes192`, `aes256`, `des`, `3des`, `sm4`. The default value is `aes`. */ ipsecConfigEncAlg?: pulumi.Input; /** * The ipsec config of the ike config of the VPN connection. Value: 900~86400. */ ipsecConfigLifetime?: pulumi.Input; /** * The local subnet of the VPN connection. Up to 5 network segments are supported. */ localSubnets: pulumi.Input[]>; /** * Whether to enable connection logging. After enabling Connection Day, you can view and download IPsec connection logs, and use the log information to troubleshoot IPsec connection problems yourself. */ logEnabled?: pulumi.Input; /** * The nat traversal of the VPN connection. */ natTraversal?: pulumi.Input; /** * Whether to initiate negotiation mode immediately. */ negotiateInstantly?: pulumi.Input; /** * The project name of the VPN connection. */ projectName?: pulumi.Input; /** * The remote subnet of the VPN connection. Up to 5 network segments are supported. */ remoteSubnets: pulumi.Input[]>; /** * The name of the VPN connection. */ vpnConnectionName?: pulumi.Input; /** * The ID of the vpn gateway. If the `AttachType` is not passed or the passed value is `VpnGateway`, this parameter must be filled. If the value of `AttachType` is `TransitRouter`, this parameter does not need to be filled. */ vpnGatewayId?: pulumi.Input; }