Overview

A Terraform provider for Barracuda Web Application Firewall (all form factors except waf-as-a-service).

Requirements

Terraform v0.14.x
Go 1.15 (to build the provider plugin)

Usage

Use provider

variable address {}
variable username {}
variable password {}
variable port {}

provider "barracudawaf" {
    address  = "x.x.x.x"
    username = "xxxxxxx"
    port     = "8443"
    password = "xxxxxxx"
}

Create Certificates

resource "barracudawaf_self_signed_certificate" "demo_self_signed_cert" {
    name                     = "DemoSelfSignedCert"
    allow_private_key_export = "Yes"
    city                     = "xxxxxx"
    common_name              = "xxxxxx"
    country_code             = "IN"
    key_size                 = "1024"
    key_type                 = "rsa"
    organization_name        = "xxxxxx"
    organizational_unit      = "xxxxxx"
    state                    = "xxxxxx"
}

resource "barracudawaf_trusted_server_certificate" "demo_trusted_server_cert" {
    name        = "DemoTrustedServerCert"
    certificate = "<base_64_encoded_content>"

    depends_on  = [ barracudawaf_self_signed_certificate.demo_self_signed_cert ]
}

resource "barracudawaf_trusted_ca_certificate" "demo_trusted_ca_cert" {
    name        = "DemoTrustedCACert"
    certificate = "<base_64_encoded_content>"
  
    depends_on  = [ barracudawaf_trusted_server_certificate.demo_trusted_server_cert ]
}

resource "barracudawaf_letsencrypt_certificate" "demo_letsencrypt_cert" {
    name                       = "DemoLetsEncryptCert"
    common_name                = "xxxxxx"
    allow_private_key_export   = "Yes"
    auto_renew_cert            = "Yes"
    schedule_renewal_day       = "60"
    multi_cert_trusted_service = barracudawaf_services.application_1.name
    
    depends_on = [ barracudawaf_trusted_ca_certificate.demo_trusted_ca_cert ]
}

resource "barracudawaf_signed_certificate" "demo_signed_cert" {
    name                     = "DemoSignedCert"
    assign_associated_key    = "Yes"
    signed_certificate       = "<base_64_encoded_content>"
    certificate_key          = "<base_64_encoded_content>"
    certificate_type         = "pem"
    allow_private_key_export = "Yes"
    key_type                 = "rsa"
  
    depends_on  = [ barracudawaf_letsencrypt_certificate.demo_letsencrypt_cert ]
}

Create Service

resource "barracudawaf_services" "demo_app_1" {
    name            = "DemoApp1"
    ip_address      = "x.x.x.x"
    port            = "80"
    type            = "HTTP"
    vsite           = "default"
    address_version = "IPv4"
    status          = "On"
    group           = "default"
    comments        = "Demo Service with Terraform"

    basic_security {
      mode = "Active"
    }
    
    depends_on = [ barracudawaf_signed_certificate.demo_signed_cert ]
}

resource "barracudawaf_services" "demo_app_2" {
    name            = "DemoApp2"
    ip_address      = "x.x.x.x"
    port            = "443"
    type            = "HTTPS"
    vsite           = "default"
    address_version = "IPv4"
    status          = "On"
    group           = "default"
    comments        = "Demo Service with Terraform"
    certificate     = barracudawaf_self_signed_certificate.demo_self_signed_cert.name

    basic_security {
      mode = "Active"
    }

    depends_on = [ barracudawaf_services.demo_app_1 ]
}

Create Servers

resource "barracudawaf_servers" "demo_server_1" {
    name            = "DemoServer1"
    identifier      = "IP Address"
    address_version = "IPv4"
    status          = "In Service"
    ip_address      = "x.x.x.x"
    port            = "80"
    comments        = "Creating the Demo Server"
    parent          = [ barracudawaf_services.demo_app_1.name ]

    depends_on      = [ barracudawaf_services.demo_app_2 ]
}

Create Security Policies

resource "barracudawaf_security_policies" "demo_security_policy_1" {
    name       = "DemoPolicy1"
    based_on   = "Create New"
    
    depends_on = [ barracudawaf_servers.demo_server_1 ]
}

Create Rule Groups

resource "barracudawaf_content_rules" "demo_rule_group_1" {
    name                = "DemoRuleGroup1"
    url_match           = "/index.html"
    host_match          = "www.example.com"
    web_firewall_policy = "DemoPolicy1"
    mode                = "Active"
    parent              = [ barracudawaf_services.demo_app_1.name ]
    
    depends_on          = [ barracudawaf_security_policies.demo_security_policy_1 ]
}

Create Rule Group Servers

resource "barracudawaf_content_rule_servers" "demo_rule_group_server_1" {
    name        = "DemoRuleGroupServer1"
    identifier  = "Hostname"
    hostname    = "barracuda.com"
    parent      = [ barracudawaf_services.demo_app_1.name, barracudawaf_content_rules.demo_rule_group_1.name ]

    depends_on = [ barracudawaf_content_rules.demo_rule_group_1 ]
}

Building The Provider

Dependencies for building from source

If you need to build from source, you should have a working Go environment setup. If not check out the Go getting started guide.

This project uses Go Modules for dependency management. To fetch all dependencies run go get inside this repository.

Build

Clone repository to: $GOPATH/src/github.com/barracudanetworks/terraform-provider-barracudawaf

$ mkdir -p $GOPATH/src/github.com/barracudanetworks; cd $GOPATH/src/github.com/barracudanetworks
$ git clone https://github.com/barracudanetworks/terraform-provider-barracudawaf.git

Enter the provider directory and build the provider

cd $GOPATH/src/github.com/barracudanetworks/terraform-provider-barracudawaf
make build

Install

$ cd $GOPATH/src/github.com/barracudanetworks/terraform-provider-barracudawaf
$ make install

Using the Provider

If you're building the provider, follow the instructions to install it as a plugin. After placing it into your plugins directory, run terraform init to initialize it.

Developing the Provider

If you wish to work on the provider, you'll first need Go installed on your machine (version 1.15 is required). You'll also need to correctly setup a GOPATH, as well as adding $GOPATH/bin to your $PATH.

To compile the provider, run make build. This will create a binary with name terraform-provider-barracudawaf in $GOPATH/src/github.com/barracudanetworks/terraform-provider-barracudawaf directory.

$ make build
...
$ $GOPATH/src/github.com/barracudanetworks/terraform-provider-barracudawaf
...

Using the binary instead of building it from source

Download the binary added under releases, and follow below :

Copy the downloaded binary terraform-provider-barracudawaf_v<tag> into plugins Terraform directory.