Terraform module to create Citrix Cloud resources (Cloud Connectors, VDAs, FAS servers and security group rules) for both simple and complex Citrix Cloud deployments in AWS following the Reference Architecture: Citrix DaaS - AWS.
No requirements.
Name | Version |
---|---|
aws | n/a |
No modules.
Name | Description | Type | Default | Required |
---|---|---|---|---|
citrix_infra_subnet_ids | List of subnet ids to deploy citrix infra (connectors & fas) ec2 instances in | list(string) |
n/a | yes |
citrix_vda_subnet_ids | List of subnet ids to deploy vda ec2 instances in | list(string) |
n/a | yes |
extra_rules_virtual_app | Extra security group rules for instances where published apps may need other resources such as database connectivity. | list(object({ |
[] |
no |
extra_rules_virtual_desktop | Extra security group rules for instances where published desktops may need other resources such as database connectivity. | list(object({ |
[] |
no |
extra_security_group_ids | List of security group IDs for existing security groups such as base or shared services (active directory, file shares, etc.). | list(string) |
[] |
no |
instances | Citrix Instances. | map(object({ |
n/a | yes |
public_key | Key pair's public key that will be registered with AWS to allow logging-in to EC2 instances. | string |
"" |
no |
tenant | Friendly name of Citrix tenant used if there are multiple tenants in the same environment. | string |
"" |
no |
vpc_id | VPC id to deploy to | string |
n/a | yes |
No outputs.
This section covers how to use the module in different scenarios following the Citrix reference architecture for AWS.
This deployent scenario includes everything needed to deploy a simple virtual apps deployment.
instances = {
xa-prod = {
"citrix_role" = "app"
"name_prefix" = "aws-xa-"
"instance_count" = 2
}
cc = {
"citrix_role" = "connector"
"name_prefix" = "aws-cc-"
"instance_count" = 2
}
}
This deployent scenario includes everything needed to deploy a simple virtual apps deployment including virtual desktops.
instances = {
xa-prod = {
"citrix_role" = "app"
"name_prefix" = "aws-xa-"
"instance_count" = 2
}
xd-prod = {
"citrix_role" = "desktop"
"name_prefix" = "aws-xd-"
"instance_count" = 2
}
cc = {
"citrix_role" = "connector"
"name_prefix" = "aws-cc-"
"instance_count" = 2
}
}
This deployent scenario includes everything needed to deploy a 2 App VDAs (Prod) on Windows Server 2019 and 2 App VDAs (UT) on Windows Server 2022.
instances = {
xa-prod = {
"citrix_role" = "app"
"name_prefix" = "aws-xaprod-"
"instance_count" = 2
"ami" = "2019"
}
xa-ut = {
"citrix_role" = "app"
"name_prefix" = "aws-xaut-"
"instance_count" = 2
"ami" = "2022"
}
cc = {
"citrix_role" = "connector"
"name_prefix" = "aws-cc-"
"instance_count" = 2
}
}
This deployent scenario includes everything needed to deploy a simple virtual apps deployment with FAS.
instances = {
xa-prod = {
"citrix_role" = "app"
"name_prefix" = "aws-xa-"
"instance_count" = 2
}
cc = {
"citrix_role" = "connector"
"name_prefix" = "aws-cc-"
"instance_count" = 2
}
fas = {
"citrix_role" = "fas"
"name_prefix" = "aws-fas-"
"instance_count" = 2
}
}
Simple Virtual Apps and Virtual Desktops with Extra Security Group Rules(2x Cloud Connectors, 2x App VDAs, 2x Desktop VDAs)
This deployent scenario includes everything needed to deploy a simple virtual apps deployment including virtual desktops including additional security group rules.
instances = {
xa-prod = {
"citrix_role" = "app"
"name_prefix" = "aws-xa-"
"instance_count" = 2
}
xd-prod = {
"citrix_role" = "desktop"
"name_prefix" = "aws-xd"
"instance_count" = 2
}
cc = {
"citrix_role" = "connector"
"name_prefix" = "aws-cc-"
"instance_count" = 2
}
}
extra_rules_virtual_app = [
{
"type" = "egress"
"from_port" = 1433
"to_port" = 1433
"protocol" = "tcp"
"cidr_blocks" = ["10.70.1.3/32"]
"description" = "TCP/1433 to database server"
},
{
"type" = "egress"
"from_port" = 445
"to_port" = 445
"protocol" = "tcp"
"cidr_blocks" = ["10.70.1.4/32"]
"description" = "TCP/445 to file server"
},
{
"type" = "ingress"
"from_port" = 443
"to_port" = 443
"protocol" = "tcp"
"cidr_blocks" = ["10.70.1.5/32"]
"description" = "TCP/443 from monitor server"
}
]
extra_rules_virtual_desktop = [
{
"type" = "egress"
"from_port" = 445
"to_port" = 445
"protocol" = "tcp"
"cidr_blocks" = ["10.70.1.4/32"]
"description" = "TCP/445 to file server"
},
{
"type" = "ingress"
"from_port" = 443
"to_port" = 443
"protocol" = "tcp"
"cidr_blocks" = ["10.70.1.5/32"]
"description" = "TCP/443 from monitor server"
}
]
Some Citrix Cloud deployments may require multiple Citrix Cloud tenants based off of URL or authentication type. This can be handled by using the tenant varibale and calling the module multiple times.