diff --git a/nsg-sei-fss.tf b/nsg-sei-fss.tf index 4ff32b4..2ab4195 100755 --- a/nsg-sei-fss.tf +++ b/nsg-sei-fss.tf @@ -4,7 +4,7 @@ resource "oci_core_network_security_group" "fss-servers-nsg" { vcn_id = var.ocid_vcn_3_tier } #-------------------------------------------------------------------------------------------------------------------------------------------- -resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_01" { +resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_01" { network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id description = "Ingress fss from app-vcn." source = var.cidr_subnet_app @@ -19,7 +19,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i } } -resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_02" { +resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_02" { network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id description = "Ingress fss from app-vcn." source = var.cidr_subnet_app @@ -34,7 +34,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i } } -resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_03" { +resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_03" { network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id description = "Ingress fss from app-vcn." source = var.cidr_subnet_app @@ -49,7 +49,7 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i } } -resource "oci_core_network_security_group_security_rule" "sei_servers_security_ingress_rule_04" { +resource "oci_core_network_security_group_security_rule" "fss_servers_security_ingress_rule_04" { network_security_group_id = oci_core_network_security_group.fss-servers-nsg.id description = "Ingress fss from app-vcn." source = var.cidr_subnet_app @@ -58,8 +58,8 @@ resource "oci_core_network_security_group_security_rule" "sei_servers_security_i protocol = "17" udp_options { destination_port_range { - max = 2048 - min = 2050 + max = 2050 + min = 2048 } } } \ No newline at end of file diff --git a/sei_public_load_balancer.tf b/sei_public_load_balancer.tf index 9d806c7..b93d7d2 100755 --- a/sei_public_load_balancer.tf +++ b/sei_public_load_balancer.tf @@ -133,7 +133,7 @@ resource "oci_load_balancer_backend_set" "backend_set_solr_servers_https" { url_path = "/solr" } load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id - name = "bs-solr-servers-https-${var.environment}" + name = "bs-solr-servers-http-${var.environment}" policy = "IP_HASH" } @@ -251,6 +251,24 @@ resource "oci_load_balancer_listener" "lister_solr_http" { } rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps[0].name ] } + + resource "oci_load_balancer_listener" "lister_solr_https" { + count = var.load_balancer_enable_https ? 1 : 0 + default_backend_set_name = oci_load_balancer_backend_set.backend_set_solr_servers_https[0].name + load_balancer_id = oci_load_balancer_load_balancer.sei_load_balancer_public.id + name = "listener-solr-https-${var.environment}" + port = "8983" + protocol = "HTTP" + hostname_names = [ oci_load_balancer_hostname.solr_hostname.name ] + ssl_configuration { + certificate_ids = [ var.load_balancer_certificate_ocid ] + protocols = [ "TLSv1.2", "TLSv1.3" ] + cipher_suite_name = "oci-tls-12-13-ssl-cipher-suite-v3" + verify_peer_certificate = "false" + verify_depth = "1" + } + rule_set_names = [ oci_load_balancer_rule_set.redirectHttpToHttps[0].name ] + } #------------------------------------------------------------------------------------------------------------------------------------------------ resource "oci_load_balancer_hostname" "sei_hostname" { hostname = var.sei_fqdn