Docs Packages
  1. Packages
  2. Alibaba Cloud
  3. API Docs
  4. cloudfirewall
  5. NatFirewall
Alibaba Cloud v3.57.1 published on Wednesday, Jun 26, 2024 by Pulumi
pulumi/pulumi-alicloud

alicloud.cloudfirewall.NatFirewall

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.57.1 published on Wednesday, Jun 26, 2024 by Pulumi
pulumi/pulumi-alicloud

    Provides a Cloud Firewall Nat Firewall resource.

    For information about Cloud Firewall Nat Firewall and how to use it, see What is Nat Firewall.

    NOTE: Available since v1.224.0.

    Example Usage

    Basic Usage

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const default = alicloud.getZones({
    availableResourceCreation: "VSwitch",
});
const defaultikZ0gD = new alicloud.vpc.Network("defaultikZ0gD", {
    cidrBlock: "172.16.0.0/12",
    vpcName: name,
});
const defaultp4O7qi = new alicloud.vpc.Switch("defaultp4O7qi", {
    vpcId: defaultikZ0gD.id,
    cidrBlock: "172.16.6.0/24",
    vswitchName: name,
    zoneId: _default.then(_default => _default.zones?.[0]?.id),
});
const default2iRZpC = new alicloud.vpc.NatGateway("default2iRZpC", {
    eipBindMode: "MULTI_BINDED",
    vpcId: defaultikZ0gD.id,
    natGatewayName: name,
    paymentType: "PayAsYouGo",
    vswitchId: defaultp4O7qi.id,
    natType: "Enhanced",
    networkType: "internet",
});
const defaultyiRwgs = new alicloud.ecs.EipAddress("defaultyiRwgs", {addressName: name});
const defaults2MTuO = new alicloud.ecs.EipAssociation("defaults2MTuO", {
    instanceId: default2iRZpC.id,
    allocationId: defaultyiRwgs.id,
    mode: "NAT",
    instanceType: "Nat",
});
const defaultAKE43g = new alicloud.vpc.SnatEntry("defaultAKE43g", {
    snatIp: defaultyiRwgs.ipAddress,
    snatTableId: default2iRZpC.snatTableIds,
    sourceVswitchId: defaultp4O7qi.id,
});
const defaultNatFirewall = new alicloud.cloudfirewall.NatFirewall("default", {
    natGatewayId: default2iRZpC.id,
    natRouteEntryLists: [{
        nexthopType: "NatGateway",
        routeTableId: defaultikZ0gD.routeTableId,
        nexthopId: default2iRZpC.id,
        destinationCidr: "0.0.0.0/0",
    }],
    firewallSwitch: "close",
    vswitchAuto: "true",
    status: "closed",
    regionNo: "cn-shenzhen",
    lang: "zh",
    proxyName: "CFW-example",
    vswitchId: defaultAKE43g.sourceVswitchId,
    strictMode: 0,
    vpcId: defaultikZ0gD.id,
    vswitchCidr: "172.16.5.0/24",
});

    import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "terraform-example"
default = alicloud.get_zones(available_resource_creation="VSwitch")
defaultik_z0g_d = alicloud.vpc.Network("defaultikZ0gD",
    cidr_block="172.16.0.0/12",
    vpc_name=name)
defaultp4_o7qi = alicloud.vpc.Switch("defaultp4O7qi",
    vpc_id=defaultik_z0g_d.id,
    cidr_block="172.16.6.0/24",
    vswitch_name=name,
    zone_id=default.zones[0].id)
default2i_r_zp_c = alicloud.vpc.NatGateway("default2iRZpC",
    eip_bind_mode="MULTI_BINDED",
    vpc_id=defaultik_z0g_d.id,
    nat_gateway_name=name,
    payment_type="PayAsYouGo",
    vswitch_id=defaultp4_o7qi.id,
    nat_type="Enhanced",
    network_type="internet")
defaultyi_rwgs = alicloud.ecs.EipAddress("defaultyiRwgs", address_name=name)
defaults2_m_tu_o = alicloud.ecs.EipAssociation("defaults2MTuO",
    instance_id=default2i_r_zp_c.id,
    allocation_id=defaultyi_rwgs.id,
    mode="NAT",
    instance_type="Nat")
default_ake43g = alicloud.vpc.SnatEntry("defaultAKE43g",
    snat_ip=defaultyi_rwgs.ip_address,
    snat_table_id=default2i_r_zp_c.snat_table_ids,
    source_vswitch_id=defaultp4_o7qi.id)
default_nat_firewall = alicloud.cloudfirewall.NatFirewall("default",
    nat_gateway_id=default2i_r_zp_c.id,
    nat_route_entry_lists=[alicloud.cloudfirewall.NatFirewallNatRouteEntryListArgs(
        nexthop_type="NatGateway",
        route_table_id=defaultik_z0g_d.route_table_id,
        nexthop_id=default2i_r_zp_c.id,
        destination_cidr="0.0.0.0/0",
    )],
    firewall_switch="close",
    vswitch_auto="true",
    status="closed",
    region_no="cn-shenzhen",
    lang="zh",
    proxy_name="CFW-example",
    vswitch_id=default_ake43g.source_vswitch_id,
    strict_mode=0,
    vpc_id=defaultik_z0g_d.id,
    vswitch_cidr="172.16.5.0/24")

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/cloudfirewall"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/ecs"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "terraform-example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		_default, err := alicloud.GetZones(ctx, &alicloud.GetZonesArgs{
			AvailableResourceCreation: pulumi.StringRef("VSwitch"),
		}, nil)
		if err != nil {
			return err
		}
		defaultikZ0gD, err := vpc.NewNetwork(ctx, "defaultikZ0gD", &vpc.NetworkArgs{
			CidrBlock: pulumi.String("172.16.0.0/12"),
			VpcName:   pulumi.String(name),
		})
		if err != nil {
			return err
		}
		defaultp4O7qi, err := vpc.NewSwitch(ctx, "defaultp4O7qi", &vpc.SwitchArgs{
			VpcId:       defaultikZ0gD.ID(),
			CidrBlock:   pulumi.String("172.16.6.0/24"),
			VswitchName: pulumi.String(name),
			ZoneId:      pulumi.String(_default.Zones[0].Id),
		})
		if err != nil {
			return err
		}
		default2iRZpC, err := vpc.NewNatGateway(ctx, "default2iRZpC", &vpc.NatGatewayArgs{
			EipBindMode:    pulumi.String("MULTI_BINDED"),
			VpcId:          defaultikZ0gD.ID(),
			NatGatewayName: pulumi.String(name),
			PaymentType:    pulumi.String("PayAsYouGo"),
			VswitchId:      defaultp4O7qi.ID(),
			NatType:        pulumi.String("Enhanced"),
			NetworkType:    pulumi.String("internet"),
		})
		if err != nil {
			return err
		}
		defaultyiRwgs, err := ecs.NewEipAddress(ctx, "defaultyiRwgs", &ecs.EipAddressArgs{
			AddressName: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		_, err = ecs.NewEipAssociation(ctx, "defaults2MTuO", &ecs.EipAssociationArgs{
			InstanceId:   default2iRZpC.ID(),
			AllocationId: defaultyiRwgs.ID(),
			Mode:         pulumi.String("NAT"),
			InstanceType: pulumi.String("Nat"),
		})
		if err != nil {
			return err
		}
		defaultAKE43g, err := vpc.NewSnatEntry(ctx, "defaultAKE43g", &vpc.SnatEntryArgs{
			SnatIp:          defaultyiRwgs.IpAddress,
			SnatTableId:     default2iRZpC.SnatTableIds,
			SourceVswitchId: defaultp4O7qi.ID(),
		})
		if err != nil {
			return err
		}
		_, err = cloudfirewall.NewNatFirewall(ctx, "default", &cloudfirewall.NatFirewallArgs{
			NatGatewayId: default2iRZpC.ID(),
			NatRouteEntryLists: cloudfirewall.NatFirewallNatRouteEntryListArray{
				&cloudfirewall.NatFirewallNatRouteEntryListArgs{
					NexthopType:     pulumi.String("NatGateway"),
					RouteTableId:    defaultikZ0gD.RouteTableId,
					NexthopId:       default2iRZpC.ID(),
					DestinationCidr: pulumi.String("0.0.0.0/0"),
				},
			},
			FirewallSwitch: pulumi.String("close"),
			VswitchAuto:    pulumi.String("true"),
			Status:         pulumi.String("closed"),
			RegionNo:       pulumi.String("cn-shenzhen"),
			Lang:           pulumi.String("zh"),
			ProxyName:      pulumi.String("CFW-example"),
			VswitchId:      defaultAKE43g.SourceVswitchId,
			StrictMode:     pulumi.Int(0),
			VpcId:          defaultikZ0gD.ID(),
			VswitchCidr:    pulumi.String("172.16.5.0/24"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "terraform-example";
    var @default = AliCloud.GetZones.Invoke(new()
    {
        AvailableResourceCreation = "VSwitch",
    });

    var defaultikZ0gD = new AliCloud.Vpc.Network("defaultikZ0gD", new()
    {
        CidrBlock = "172.16.0.0/12",
        VpcName = name,
    });

    var defaultp4O7qi = new AliCloud.Vpc.Switch("defaultp4O7qi", new()
    {
        VpcId = defaultikZ0gD.Id,
        CidrBlock = "172.16.6.0/24",
        VswitchName = name,
        ZoneId = @default.Apply(@default => @default.Apply(getZonesResult => getZonesResult.Zones[0]?.Id)),
    });

    var default2iRZpC = new AliCloud.Vpc.NatGateway("default2iRZpC", new()
    {
        EipBindMode = "MULTI_BINDED",
        VpcId = defaultikZ0gD.Id,
        NatGatewayName = name,
        PaymentType = "PayAsYouGo",
        VswitchId = defaultp4O7qi.Id,
        NatType = "Enhanced",
        NetworkType = "internet",
    });

    var defaultyiRwgs = new AliCloud.Ecs.EipAddress("defaultyiRwgs", new()
    {
        AddressName = name,
    });

    var defaults2MTuO = new AliCloud.Ecs.EipAssociation("defaults2MTuO", new()
    {
        InstanceId = default2iRZpC.Id,
        AllocationId = defaultyiRwgs.Id,
        Mode = "NAT",
        InstanceType = "Nat",
    });

    var defaultAKE43g = new AliCloud.Vpc.SnatEntry("defaultAKE43g", new()
    {
        SnatIp = defaultyiRwgs.IpAddress,
        SnatTableId = default2iRZpC.SnatTableIds,
        SourceVswitchId = defaultp4O7qi.Id,
    });

    var defaultNatFirewall = new AliCloud.CloudFirewall.NatFirewall("default", new()
    {
        NatGatewayId = default2iRZpC.Id,
        NatRouteEntryLists = new[]
        {
            new AliCloud.CloudFirewall.Inputs.NatFirewallNatRouteEntryListArgs
            {
                NexthopType = "NatGateway",
                RouteTableId = defaultikZ0gD.RouteTableId,
                NexthopId = default2iRZpC.Id,
                DestinationCidr = "0.0.0.0/0",
            },
        },
        FirewallSwitch = "close",
        VswitchAuto = "true",
        Status = "closed",
        RegionNo = "cn-shenzhen",
        Lang = "zh",
        ProxyName = "CFW-example",
        VswitchId = defaultAKE43g.SourceVswitchId,
        StrictMode = 0,
        VpcId = defaultikZ0gD.Id,
        VswitchCidr = "172.16.5.0/24",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.AlicloudFunctions;
import com.pulumi.alicloud.inputs.GetZonesArgs;
import com.pulumi.alicloud.vpc.Network;
import com.pulumi.alicloud.vpc.NetworkArgs;
import com.pulumi.alicloud.vpc.Switch;
import com.pulumi.alicloud.vpc.SwitchArgs;
import com.pulumi.alicloud.vpc.NatGateway;
import com.pulumi.alicloud.vpc.NatGatewayArgs;
import com.pulumi.alicloud.ecs.EipAddress;
import com.pulumi.alicloud.ecs.EipAddressArgs;
import com.pulumi.alicloud.ecs.EipAssociation;
import com.pulumi.alicloud.ecs.EipAssociationArgs;
import com.pulumi.alicloud.vpc.SnatEntry;
import com.pulumi.alicloud.vpc.SnatEntryArgs;
import com.pulumi.alicloud.cloudfirewall.NatFirewall;
import com.pulumi.alicloud.cloudfirewall.NatFirewallArgs;
import com.pulumi.alicloud.cloudfirewall.inputs.NatFirewallNatRouteEntryListArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("terraform-example");
        final var default = AlicloudFunctions.getZones(GetZonesArgs.builder()
            .availableResourceCreation("VSwitch")
            .build());

        var defaultikZ0gD = new Network("defaultikZ0gD", NetworkArgs.builder()
            .cidrBlock("172.16.0.0/12")
            .vpcName(name)
            .build());

        var defaultp4O7qi = new Switch("defaultp4O7qi", SwitchArgs.builder()
            .vpcId(defaultikZ0gD.id())
            .cidrBlock("172.16.6.0/24")
            .vswitchName(name)
            .zoneId(default_.zones()[0].id())
            .build());

        var default2iRZpC = new NatGateway("default2iRZpC", NatGatewayArgs.builder()
            .eipBindMode("MULTI_BINDED")
            .vpcId(defaultikZ0gD.id())
            .natGatewayName(name)
            .paymentType("PayAsYouGo")
            .vswitchId(defaultp4O7qi.id())
            .natType("Enhanced")
            .networkType("internet")
            .build());

        var defaultyiRwgs = new EipAddress("defaultyiRwgs", EipAddressArgs.builder()
            .addressName(name)
            .build());

        var defaults2MTuO = new EipAssociation("defaults2MTuO", EipAssociationArgs.builder()
            .instanceId(default2iRZpC.id())
            .allocationId(defaultyiRwgs.id())
            .mode("NAT")
            .instanceType("Nat")
            .build());

        var defaultAKE43g = new SnatEntry("defaultAKE43g", SnatEntryArgs.builder()
            .snatIp(defaultyiRwgs.ipAddress())
            .snatTableId(default2iRZpC.snatTableIds())
            .sourceVswitchId(defaultp4O7qi.id())
            .build());

        var defaultNatFirewall = new NatFirewall("defaultNatFirewall", NatFirewallArgs.builder()
            .natGatewayId(default2iRZpC.id())
            .natRouteEntryLists(NatFirewallNatRouteEntryListArgs.builder()
                .nexthopType("NatGateway")
                .routeTableId(defaultikZ0gD.routeTableId())
                .nexthopId(default2iRZpC.id())
                .destinationCidr("0.0.0.0/0")
                .build())
            .firewallSwitch("close")
            .vswitchAuto("true")
            .status("closed")
            .regionNo("cn-shenzhen")
            .lang("zh")
            .proxyName("CFW-example")
            .vswitchId(defaultAKE43g.sourceVswitchId())
            .strictMode("0")
            .vpcId(defaultikZ0gD.id())
            .vswitchCidr("172.16.5.0/24")
            .build());

    }
}

    configuration:
  name:
    type: string
    default: terraform-example
resources:
  defaultikZ0gD:
    type: alicloud:vpc:Network
    properties:
      cidrBlock: 172.16.0.0/12
      vpcName: ${name}
  defaultp4O7qi:
    type: alicloud:vpc:Switch
    properties:
      vpcId: ${defaultikZ0gD.id}
      cidrBlock: 172.16.6.0/24
      vswitchName: ${name}
      zoneId: ${default.zones[0].id}
  default2iRZpC:
    type: alicloud:vpc:NatGateway
    properties:
      eipBindMode: MULTI_BINDED
      vpcId: ${defaultikZ0gD.id}
      natGatewayName: ${name}
      paymentType: PayAsYouGo
      vswitchId: ${defaultp4O7qi.id}
      natType: Enhanced
      networkType: internet
  defaultyiRwgs:
    type: alicloud:ecs:EipAddress
    properties:
      addressName: ${name}
  defaults2MTuO:
    type: alicloud:ecs:EipAssociation
    properties:
      instanceId: ${default2iRZpC.id}
      allocationId: ${defaultyiRwgs.id}
      mode: NAT
      instanceType: Nat
  defaultAKE43g:
    type: alicloud:vpc:SnatEntry
    properties:
      snatIp: ${defaultyiRwgs.ipAddress}
      snatTableId: ${default2iRZpC.snatTableIds}
      sourceVswitchId: ${defaultp4O7qi.id}
  defaultNatFirewall:
    type: alicloud:cloudfirewall:NatFirewall
    name: default
    properties:
      natGatewayId: ${default2iRZpC.id}
      natRouteEntryLists:
        - nexthopType: NatGateway
          routeTableId: ${defaultikZ0gD.routeTableId}
          nexthopId: ${default2iRZpC.id}
          destinationCidr: 0.0.0.0/0
      firewallSwitch: close
      vswitchAuto: 'true'
      status: closed
      regionNo: cn-shenzhen
      lang: zh
      proxyName: CFW-example
      vswitchId: ${defaultAKE43g.sourceVswitchId}
      strictMode: '0'
      vpcId: ${defaultikZ0gD.id}
      vswitchCidr: 172.16.5.0/24
variables:
  default:
    fn::invoke:
      Function: alicloud:getZones
      Arguments:
        availableResourceCreation: VSwitch

    Create NatFirewall Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new NatFirewall(name: string, args: NatFirewallArgs, opts?: CustomResourceOptions);
    @overload
def NatFirewall(resource_name: str,
                args: NatFirewallArgs,
                opts: Optional[ResourceOptions] = None)

@overload
def NatFirewall(resource_name: str,
                opts: Optional[ResourceOptions] = None,
                nat_gateway_id: Optional[str] = None,
                nat_route_entry_lists: Optional[Sequence[NatFirewallNatRouteEntryListArgs]] = None,
                proxy_name: Optional[str] = None,
                region_no: Optional[str] = None,
                vpc_id: Optional[str] = None,
                firewall_switch: Optional[str] = None,
                lang: Optional[str] = None,
                status: Optional[str] = None,
                strict_mode: Optional[int] = None,
                vswitch_auto: Optional[str] = None,
                vswitch_cidr: Optional[str] = None,
                vswitch_id: Optional[str] = None)
    func NewNatFirewall(ctx *Context, name string, args NatFirewallArgs, opts ...ResourceOption) (*NatFirewall, error)
    public NatFirewall(string name, NatFirewallArgs args, CustomResourceOptions? opts = null)
    public NatFirewall(String name, NatFirewallArgs args)
public NatFirewall(String name, NatFirewallArgs args, CustomResourceOptions options)

    type: alicloud:cloudfirewall:NatFirewall
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args NatFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args NatFirewallArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args NatFirewallArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args NatFirewallArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args NatFirewallArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var natFirewallResource = new AliCloud.CloudFirewall.NatFirewall("natFirewallResource", new()
{
    NatGatewayId = "string",
    NatRouteEntryLists = new[]
    {
        new AliCloud.CloudFirewall.Inputs.NatFirewallNatRouteEntryListArgs
        {
            DestinationCidr = "string",
            NexthopId = "string",
            NexthopType = "string",
            RouteTableId = "string",
        },
    },
    ProxyName = "string",
    RegionNo = "string",
    VpcId = "string",
    FirewallSwitch = "string",
    Lang = "string",
    Status = "string",
    StrictMode = 0,
    VswitchAuto = "string",
    VswitchCidr = "string",
    VswitchId = "string",
});

    example, err := cloudfirewall.NewNatFirewall(ctx, "natFirewallResource", &cloudfirewall.NatFirewallArgs{
	NatGatewayId: pulumi.String("string"),
	NatRouteEntryLists: cloudfirewall.NatFirewallNatRouteEntryListArray{
		&cloudfirewall.NatFirewallNatRouteEntryListArgs{
			DestinationCidr: pulumi.String("string"),
			NexthopId:       pulumi.String("string"),
			NexthopType:     pulumi.String("string"),
			RouteTableId:    pulumi.String("string"),
		},
	},
	ProxyName:      pulumi.String("string"),
	RegionNo:       pulumi.String("string"),
	VpcId:          pulumi.String("string"),
	FirewallSwitch: pulumi.String("string"),
	Lang:           pulumi.String("string"),
	Status:         pulumi.String("string"),
	StrictMode:     pulumi.Int(0),
	VswitchAuto:    pulumi.String("string"),
	VswitchCidr:    pulumi.String("string"),
	VswitchId:      pulumi.String("string"),
})

    var natFirewallResource = new NatFirewall("natFirewallResource", NatFirewallArgs.builder()
    .natGatewayId("string")
    .natRouteEntryLists(NatFirewallNatRouteEntryListArgs.builder()
        .destinationCidr("string")
        .nexthopId("string")
        .nexthopType("string")
        .routeTableId("string")
        .build())
    .proxyName("string")
    .regionNo("string")
    .vpcId("string")
    .firewallSwitch("string")
    .lang("string")
    .status("string")
    .strictMode(0)
    .vswitchAuto("string")
    .vswitchCidr("string")
    .vswitchId("string")
    .build());

    nat_firewall_resource = alicloud.cloudfirewall.NatFirewall("natFirewallResource",
    nat_gateway_id="string",
    nat_route_entry_lists=[alicloud.cloudfirewall.NatFirewallNatRouteEntryListArgs(
        destination_cidr="string",
        nexthop_id="string",
        nexthop_type="string",
        route_table_id="string",
    )],
    proxy_name="string",
    region_no="string",
    vpc_id="string",
    firewall_switch="string",
    lang="string",
    status="string",
    strict_mode=0,
    vswitch_auto="string",
    vswitch_cidr="string",
    vswitch_id="string")

    const natFirewallResource = new alicloud.cloudfirewall.NatFirewall("natFirewallResource", {
    natGatewayId: "string",
    natRouteEntryLists: [{
        destinationCidr: "string",
        nexthopId: "string",
        nexthopType: "string",
        routeTableId: "string",
    }],
    proxyName: "string",
    regionNo: "string",
    vpcId: "string",
    firewallSwitch: "string",
    lang: "string",
    status: "string",
    strictMode: 0,
    vswitchAuto: "string",
    vswitchCidr: "string",
    vswitchId: "string",
});

    type: alicloud:cloudfirewall:NatFirewall
properties:
    firewallSwitch: string
    lang: string
    natGatewayId: string
    natRouteEntryLists:
        - destinationCidr: string
          nexthopId: string
          nexthopType: string
          routeTableId: string
    proxyName: string
    regionNo: string
    status: string
    strictMode: 0
    vpcId: string
    vswitchAuto: string
    vswitchCidr: string
    vswitchId: string

    NatFirewall Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The NatFirewall resource accepts the following input properties:

    NatGatewayId string
    NAT gateway ID.
    NatRouteEntryLists List<Pulumi.AliCloud.CloudFirewall.Inputs.NatFirewallNatRouteEntryList>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    ProxyName string
    NAT firewall name.
    RegionNo string
    Region.
    VpcId string
    The ID of the VPC instance.
    FirewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    Lang string
    Lang.
    Status string
    The status of the resource.
    StrictMode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    VswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    VswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    VswitchId string
    The switch ID. Required for switch manual mode.
    NatGatewayId string
    NAT gateway ID.
    NatRouteEntryLists []NatFirewallNatRouteEntryListArgs
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    ProxyName string
    NAT firewall name.
    RegionNo string
    Region.
    VpcId string
    The ID of the VPC instance.
    FirewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    Lang string
    Lang.
    Status string
    The status of the resource.
    StrictMode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    VswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    VswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    VswitchId string
    The switch ID. Required for switch manual mode.
    natGatewayId String
    NAT gateway ID.
    natRouteEntryLists List<NatFirewallNatRouteEntryList>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName String
    NAT firewall name.
    regionNo String
    Region.
    vpcId String
    The ID of the VPC instance.
    firewallSwitch String
    Safety protection switch. Value:-open: open-close: close.
    lang String
    Lang.
    status String
    The status of the resource.
    strictMode Integer
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vswitchAuto String
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr String
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId String
    The switch ID. Required for switch manual mode.
    natGatewayId string
    NAT gateway ID.
    natRouteEntryLists NatFirewallNatRouteEntryList[]
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName string
    NAT firewall name.
    regionNo string
    Region.
    vpcId string
    The ID of the VPC instance.
    firewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    lang string
    Lang.
    status string
    The status of the resource.
    strictMode number
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId string
    The switch ID. Required for switch manual mode.
    nat_gateway_id str
    NAT gateway ID.
    nat_route_entry_lists Sequence[NatFirewallNatRouteEntryListArgs]
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxy_name str
    NAT firewall name.
    region_no str
    Region.
    vpc_id str
    The ID of the VPC instance.
    firewall_switch str
    Safety protection switch. Value:-open: open-close: close.
    lang str
    Lang.
    status str
    The status of the resource.
    strict_mode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vswitch_auto str
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitch_cidr str
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitch_id str
    The switch ID. Required for switch manual mode.
    natGatewayId String
    NAT gateway ID.
    natRouteEntryLists List<Property Map>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName String
    NAT firewall name.
    regionNo String
    Region.
    vpcId String
    The ID of the VPC instance.
    firewallSwitch String
    Safety protection switch. Value:-open: open-close: close.
    lang String
    Lang.
    status String
    The status of the resource.
    strictMode Number
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vswitchAuto String
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr String
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId String
    The switch ID. Required for switch manual mode.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the NatFirewall resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing NatFirewall Resource

    Get an existing NatFirewall resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: NatFirewallState, opts?: CustomResourceOptions): NatFirewall
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        firewall_switch: Optional[str] = None,
        lang: Optional[str] = None,
        nat_gateway_id: Optional[str] = None,
        nat_route_entry_lists: Optional[Sequence[NatFirewallNatRouteEntryListArgs]] = None,
        proxy_name: Optional[str] = None,
        region_no: Optional[str] = None,
        status: Optional[str] = None,
        strict_mode: Optional[int] = None,
        vpc_id: Optional[str] = None,
        vswitch_auto: Optional[str] = None,
        vswitch_cidr: Optional[str] = None,
        vswitch_id: Optional[str] = None) -> NatFirewall
    func GetNatFirewall(ctx *Context, name string, id IDInput, state *NatFirewallState, opts ...ResourceOption) (*NatFirewall, error)
    public static NatFirewall Get(string name, Input<string> id, NatFirewallState? state, CustomResourceOptions? opts = null)
    public static NatFirewall get(String name, Output<String> id, NatFirewallState state, CustomResourceOptions options)
    Resource lookup is not supported in YAML
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    FirewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    Lang string
    Lang.
    NatGatewayId string
    NAT gateway ID.
    NatRouteEntryLists List<Pulumi.AliCloud.CloudFirewall.Inputs.NatFirewallNatRouteEntryList>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    ProxyName string
    NAT firewall name.
    RegionNo string
    Region.
    Status string
    The status of the resource.
    StrictMode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    VpcId string
    The ID of the VPC instance.
    VswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    VswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    VswitchId string
    The switch ID. Required for switch manual mode.
    FirewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    Lang string
    Lang.
    NatGatewayId string
    NAT gateway ID.
    NatRouteEntryLists []NatFirewallNatRouteEntryListArgs
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    ProxyName string
    NAT firewall name.
    RegionNo string
    Region.
    Status string
    The status of the resource.
    StrictMode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    VpcId string
    The ID of the VPC instance.
    VswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    VswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    VswitchId string
    The switch ID. Required for switch manual mode.
    firewallSwitch String
    Safety protection switch. Value:-open: open-close: close.
    lang String
    Lang.
    natGatewayId String
    NAT gateway ID.
    natRouteEntryLists List<NatFirewallNatRouteEntryList>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName String
    NAT firewall name.
    regionNo String
    Region.
    status String
    The status of the resource.
    strictMode Integer
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vpcId String
    The ID of the VPC instance.
    vswitchAuto String
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr String
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId String
    The switch ID. Required for switch manual mode.
    firewallSwitch string
    Safety protection switch. Value:-open: open-close: close.
    lang string
    Lang.
    natGatewayId string
    NAT gateway ID.
    natRouteEntryLists NatFirewallNatRouteEntryList[]
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName string
    NAT firewall name.
    regionNo string
    Region.
    status string
    The status of the resource.
    strictMode number
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vpcId string
    The ID of the VPC instance.
    vswitchAuto string
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr string
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId string
    The switch ID. Required for switch manual mode.
    firewall_switch str
    Safety protection switch. Value:-open: open-close: close.
    lang str
    Lang.
    nat_gateway_id str
    NAT gateway ID.
    nat_route_entry_lists Sequence[NatFirewallNatRouteEntryListArgs]
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxy_name str
    NAT firewall name.
    region_no str
    Region.
    status str
    The status of the resource.
    strict_mode int
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vpc_id str
    The ID of the VPC instance.
    vswitch_auto str
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitch_cidr str
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitch_id str
    The switch ID. Required for switch manual mode.
    firewallSwitch String
    Safety protection switch. Value:-open: open-close: close.
    lang String
    Lang.
    natGatewayId String
    NAT gateway ID.
    natRouteEntryLists List<Property Map>
    The list of routes to be switched by the NAT gateway. See nat_route_entry_list below.
    proxyName String
    NAT firewall name.
    regionNo String
    Region.
    status String
    The status of the resource.
    strictMode Number
    Whether strict mode is enabled 1-Enable strict mode 0-Disable strict mode.
    vpcId String
    The ID of the VPC instance.
    vswitchAuto String
    Whether to use switch automatic mode. Value: true: Use automatic mode: false: Use manual mode.
    vswitchCidr String
    The network segment of the virtual switch. Required for Switch automatic mode.
    vswitchId String
    The switch ID. Required for switch manual mode.

    Supporting Types

    NatFirewallNatRouteEntryList, NatFirewallNatRouteEntryListArgs

    DestinationCidr string
    The destination network segment of the default route.
    NexthopId string
    The next hop address of the original NAT gateway.
    NexthopType string
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    RouteTableId string
    The route table where the default route of the NAT gateway is located.
    DestinationCidr string
    The destination network segment of the default route.
    NexthopId string
    The next hop address of the original NAT gateway.
    NexthopType string
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    RouteTableId string
    The route table where the default route of the NAT gateway is located.
    destinationCidr String
    The destination network segment of the default route.
    nexthopId String
    The next hop address of the original NAT gateway.
    nexthopType String
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    routeTableId String
    The route table where the default route of the NAT gateway is located.
    destinationCidr string
    The destination network segment of the default route.
    nexthopId string
    The next hop address of the original NAT gateway.
    nexthopType string
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    routeTableId string
    The route table where the default route of the NAT gateway is located.
    destination_cidr str
    The destination network segment of the default route.
    nexthop_id str
    The next hop address of the original NAT gateway.
    nexthop_type str
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    route_table_id str
    The route table where the default route of the NAT gateway is located.
    destinationCidr String
    The destination network segment of the default route.
    nexthopId String
    The next hop address of the original NAT gateway.
    nexthopType String
    The network type of the next hop. Value: NatGateway : NAT Gateway.
    routeTableId String
    The route table where the default route of the NAT gateway is located.

    Import

    Cloud Firewall Nat Firewall can be imported using the id, e.g.

    $ pulumi import alicloud:cloudfirewall/natFirewall:NatFirewall example <id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.57.1 published on Wednesday, Jun 26, 2024 by Pulumi
    pulumi/pulumi-alicloud