Provides a firewall in IBM. One firewall protects one public VLAN and provides in-bound network packet filtering.

You can order or find firewalls in the IBM Cloud infrastructure customer portal by navigating to Network > IP Management > VLANs and clicking the Gateway/Firewall column.

For more information about how to configure a firewall, see the docs.

Example Usage

resource "ibm_firewall" "testfw" {
  ha_enabled = false
  public_vlan_id = 12345678
  tags = [

Argument Reference

The following arguments are supported:

  • firewall_type - (Optional, string) Specifies the type of firewall to create. Valid options are HARDWARE_FIREWALL_DEDICATED or FORTIGATE_SECURITY_APPLIANCE. Defaults to HARDWARE_FIREWALL_DEDICATED
  • ha_enabled - (Required, boolean) Specifies whether the local load balancer needs to be HA-enabled.
  • public_vlan_id - (Required, integer) The target public VLAN ID that you want the firewall to protect. You can find accepted values here. Click the desired VLAN and note the ID number in the resulting URL. You can also refer to a VLAN by name using a data source.
  • tags - (Optional, array of strings) Set tages on the firewall. Permitted characters include: A-Z, 0-9, whitespace, _ (underscore), - (hyphen), . (period), and : (colon). All other characters are removed.

Attribute Reference

The following attributes are exported:

  • id - The unique identifier of the VLAN.
  • location - The location/datacenter of the created firewall device.
  • primary_ip: - The public gateway IP address.
  • username: - The username used to login into the device in case of Fortigate Appliances.
  • password: - The password used to login into the device in case of Fortigate Appliances.