Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Possibility to create firewall rules with protocol and port #1135

Open
Nacymus opened this issue Feb 29, 2024 · 1 comment
Open

Possibility to create firewall rules with protocol and port #1135

Nacymus opened this issue Feb 29, 2024 · 1 comment

Comments

@Nacymus
Copy link

Nacymus commented Feb 29, 2024

Is your feature request related to a problem? Please describe.

The provider includes two resources to manage firewall rules: "nsxt_policy_security_policy" where rules and policy form a compound resource, and "nsxt_policy_security_policy_rule" to manage rules as objects separate from the policy.

Both these resources only accept a list of paths as input to services parameter of a rule.

Describe the solution you'd like

We would like to have an extra input for when we need to create a firewall rule on protocols and ports, rather than policy services.
The NSXT API offers a way to do that by including the parameter "service_entries" in the POST/PUT/PATCH request body as below :

{ ... "service_entries": [ { "l4_protocol": "TCP", "source_ports": [ "22-3300" ], "destination_ports": [ "22" ], "resource_type": "L4PortSetServiceEntry", "marked_for_delete": false, "overridden": false, "_protection": "NOT_PROTECTED" } ... ],

Describe alternatives you've considered

No response

Additional context

No response

@cneu-bc
Copy link

cneu-bc commented Jun 3, 2024

It would be nice to get this functionality for the nsxt_policy_security_policy resource, too.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants