Skip to content

Resource: proxmox_virtual_environment_cluster_firewall

Manages firewall options on the cluster level.

Example Usage

resource "proxmox_virtual_environment_cluster_firewall" "example" {
  enabled = false

  ebtables       = false
  input_policy   = "DROP"
  output_policy  = "ACCEPT"
  forward_policy = "ACCEPT"
  log_ratelimit {
    enabled = false
    burst   = 10
    rate    = "5/second"
  }
}

Argument Reference

  • enabled - (Optional) Enable or disable the firewall cluster wide.
  • ebtables - (Optional) Enable ebtables rules cluster wide.
  • input_policy - (Optional) The default input policy (ACCEPT, DROP, REJECT).
  • output_policy - (Optional) The default output policy (ACCEPT, DROP, REJECT).
  • forward_policy - (Optional) The default forward policy (ACCEPT, DROP).
  • log_ratelimit - (Optional) The log rate limit.
    • enabled - (Optional) Enable or disable the log rate limit.
    • burst - (Optional) Initial burst of packages which will always get logged before the rate is applied (defaults to 5).
    • rate - (Optional) Frequency with which the burst bucket gets refilled (defaults to 1/second).

Attribute Reference

There are no additional attributes available for this resource.

Important Notes

Be careful not to use this resource multiple times for the same node.

Import

Instances can be imported without an ID, but you still need to pass one, e.g.,

terraform import proxmox_virtual_environment_cluster_firewall.example example