Carga inicial
This commit is contained in:
Guilherme Silva
258
sei_public_load_balancer.tf
Executable file
258
sei_public_load_balancer.tf
Executable file
@@ -0,0 +1,258 @@
|
||||
resource "oci_load_balancer_load_balancer" "sei_load_balancer_public" {
|
||||
compartment_id = var.ocid_compartment_networking
|
||||
display_name = "${var.load_balancer_prefix_hostname}-${var.environment}-public"
|
||||
shape = "flexible"
|
||||
subnet_ids = [ var.ocid_subnet_public ]
|
||||
is_delete_protection_enabled = "false"
|
||||
is_private = "false"
|
||||
network_security_group_ids = [ oci_core_network_security_group.load-balancer-public-nsg.id ]
|
||||
shape_details {
|
||||
maximum_bandwidth_in_mbps = var.load_balancer_maximum_bandwidth_in_mbps
|
||||
minimum_bandwidth_in_mbps = var.load_balancer_minimum_bandwidth_in_mbps
|
||||
}
|
||||
}
|
||||
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_backend_set" "backend_set_sei_servers" {
|
||||
health_checker {
|
||||
protocol = "HTTP"
|
||||
interval_ms = "10000"
|
||||
port = "80"
|
||||
retries = "3"
|
||||
return_code = "302"
|
||||
timeout_in_millis = "3000"
|
||||
url_path = "/"
|
||||
}
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "bs-sei-servers"
|
||||
policy = "IP_HASH"
|
||||
session_persistence_configuration {
|
||||
cookie_name = "PHPSESSID-SEI"
|
||||
}
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_backend_set" "backend_set_sip_servers" {
|
||||
health_checker {
|
||||
protocol = "HTTP"
|
||||
interval_ms = "10000"
|
||||
port = "80"
|
||||
retries = "3"
|
||||
return_code = "302"
|
||||
timeout_in_millis = "3000"
|
||||
url_path = "/"
|
||||
}
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "bs-sip-servers"
|
||||
policy = "IP_HASH"
|
||||
session_persistence_configuration {
|
||||
cookie_name = "PHPSESSID-SIP"
|
||||
}
|
||||
}
|
||||
|
||||
resource "oci_load_balancer_backend_set" "backend_set_solr_servers" {
|
||||
health_checker {
|
||||
protocol = "HTTP"
|
||||
interval_ms = "10000"
|
||||
port = "8983"
|
||||
retries = "3"
|
||||
return_code = "302"
|
||||
timeout_in_millis = "3000"
|
||||
url_path = "/solr"
|
||||
}
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "bs-solr-servers"
|
||||
policy = "IP_HASH"
|
||||
}
|
||||
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_backend" "sip_servers" {
|
||||
for_each = { for idx, inst in oci_core_instance.sip-instance : idx => inst }
|
||||
backendset_name = oci_load_balancer_backend_set.backend_set_sip_servers.name
|
||||
ip_address = each.value.private_ip
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
port = "80"
|
||||
}
|
||||
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_backend" "sei_servers" {
|
||||
for_each = { for idx, inst in oci_core_instance.sei-instance : idx => inst }
|
||||
backendset_name = oci_load_balancer_backend_set.backend_set_sei_servers.name
|
||||
ip_address = each.value.private_ip
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
port = "80"
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_backend" "solr_servers" {
|
||||
for_each = { for idx, inst in oci_core_instance.solr-instance : idx => inst }
|
||||
backendset_name = oci_load_balancer_backend_set.backend_set_solr_servers.name
|
||||
ip_address = each.value.private_ip
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
port = "8983"
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_listener" "lister_http_sei" {
|
||||
default_backend_set_name = oci_load_balancer_backend_set.backend_set_sei_servers.name
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "listener-sei"
|
||||
port = "80"
|
||||
protocol = "HTTP"
|
||||
hostname_names = [ oci_load_balancer_hostname.sei_hostname.name ]
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_listener" "lister_http_sip" {
|
||||
default_backend_set_name = oci_load_balancer_backend_set.backend_set_sip_servers.name
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "listener-sip"
|
||||
port = "80"
|
||||
protocol = "HTTP"
|
||||
hostname_names = [ oci_load_balancer_hostname.sip_hostname.name ]
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_load_balancer_listener" "lister_solr" {
|
||||
default_backend_set_name = oci_load_balancer_backend_set.backend_set_solr_servers.name
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "listener-solr"
|
||||
port = "8983"
|
||||
protocol = "HTTP"
|
||||
hostname_names = [ oci_load_balancer_hostname.solr_hostname.name ]
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
# AQUI
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
|
||||
resource "oci_load_balancer_hostname" "sei_hostname" {
|
||||
hostname = var.sei_fqdn
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "sei-fqdn"
|
||||
}
|
||||
|
||||
|
||||
resource "oci_load_balancer_hostname" "sip_hostname" {
|
||||
hostname = var.sip_fqdn
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "sip-fqdn"
|
||||
}
|
||||
|
||||
resource "oci_load_balancer_hostname" "solr_hostname" {
|
||||
hostname = var.solr_fqdn
|
||||
load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
name = "solr-fqdn"
|
||||
}
|
||||
#------------------------------------------------------------------------------------------------------------------------------------------------
|
||||
resource "oci_logging_log" "lb_access_log" {
|
||||
display_name = "${oci_load_balancer_load_balancer.sei_load_balancer_public.display_name}-access-log"
|
||||
log_group_id = oci_logging_log_group.sei_log_group.id
|
||||
log_type = "SERVICE"
|
||||
|
||||
configuration {
|
||||
source {
|
||||
source_type = "OCISERVICE"
|
||||
service = "loadbalancer"
|
||||
resource = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
category = "access"
|
||||
}
|
||||
|
||||
compartment_id = var.ocid_compartment_networking
|
||||
}
|
||||
|
||||
is_enabled = true
|
||||
retention_duration = 30
|
||||
}
|
||||
|
||||
resource "oci_logging_log" "lb_error_log" {
|
||||
display_name = "${oci_load_balancer_load_balancer.sei_load_balancer_public.display_name}-error-log"
|
||||
log_group_id = oci_logging_log_group.sei_log_group.id
|
||||
log_type = "SERVICE"
|
||||
|
||||
configuration {
|
||||
source {
|
||||
source_type = "OCISERVICE"
|
||||
service = "loadbalancer"
|
||||
resource = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
category = "error"
|
||||
}
|
||||
|
||||
compartment_id = var.ocid_compartment_networking
|
||||
}
|
||||
is_enabled = true
|
||||
retention_duration = 30
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
# resource "oci_load_balancer_listener" "lister_sei_https" {
|
||||
# default_backend_set_name = oci_load_balancer_backend_set.backend_set_sei_apps.name
|
||||
# load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
# name = "listener-sei-https"
|
||||
# port = "443"
|
||||
# protocol = "HTTP"
|
||||
# hostname_names = [ oci_load_balancer_hostname.sei_hostname.name ]
|
||||
# ssl_configuration {
|
||||
# certificate_ids = [ "ocid1.certificate.oc1.sa-saopaulo-1.amaaaaaaz63sg4iagucp6pedtfwbxd3oxud5ds7atsgsf2a6lwi6c5nnv7va" ]
|
||||
# protocols = [ "TLSv1.2", "TLSv1.3" ]
|
||||
# cipher_suite_name = "oci-default-ssl-cipher-suite-v1"
|
||||
# verify_peer_certificate = "false"
|
||||
# verify_depth = "1"
|
||||
# }
|
||||
# rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps.name ]
|
||||
# }
|
||||
#
|
||||
# resource "oci_load_balancer_listener" "lister_sip_https" {
|
||||
# default_backend_set_name = oci_load_balancer_backend_set.backend_set_sip_apps.name
|
||||
# load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
# name = "listener-sip-https"
|
||||
# port = "443"
|
||||
# protocol = "HTTP"
|
||||
# hostname_names = [ oci_load_balancer_hostname.sip_hostname.name ]
|
||||
# ssl_configuration {
|
||||
# certificate_ids = [ "ocid1.certificate.oc1.sa-saopaulo-1.amaaaaaaz63sg4iagucp6pedtfwbxd3oxud5ds7atsgsf2a6lwi6c5nnv7va" ]
|
||||
# protocols = [ "TLSv1.2", "TLSv1.3" ]
|
||||
# cipher_suite_name = "oci-default-ssl-cipher-suite-v1"
|
||||
# verify_peer_certificate = "false"
|
||||
# verify_depth = "1"
|
||||
# }
|
||||
# }
|
||||
##-----
|
||||
|
||||
#resource "oci_load_balancer_load_balancer_routing_policy" "sei_routing_policy" {
|
||||
# condition_language_version = "V1"
|
||||
# load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
# name = "RedirectHttpToHTTPs"
|
||||
# rules {
|
||||
# #Required
|
||||
# actions {
|
||||
# #Required
|
||||
# backend_set_name = oci_load_balancer_backend_set.backend_set_sei_apps.name
|
||||
# name = "FORWARD_TO_BACKENDSET"
|
||||
# }
|
||||
# condition = "any(http.request.url.path sw '/SIP')"
|
||||
# name = "SIP_SERVER"
|
||||
# }
|
||||
#}
|
||||
#
|
||||
#
|
||||
#resource "oci_load_balancer_rule_set" "redirectHttpToHttps" {
|
||||
# items {
|
||||
# action = "REDIRECT"
|
||||
# conditions {
|
||||
# #Required
|
||||
# attribute_name = "PATH"
|
||||
# attribute_value = "/"
|
||||
#
|
||||
# #Optional
|
||||
# operator = "FORCE_LONGEST_PREFIX_MATCH"
|
||||
# }
|
||||
# redirect_uri {
|
||||
# protocol = "HTTPS"
|
||||
# host = "{host}"
|
||||
# port = 443
|
||||
# path = "/{path}"
|
||||
# query = "?{query}"
|
||||
# }
|
||||
#
|
||||
# response_code = 302
|
||||
# }
|
||||
# load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id
|
||||
# name = "redirect_http_to_https"
|
||||
#}
|
||||
Reference in New Issue
Block a user