/terraform-aws-ecs-service-load-balancer

Terraform module to create load balancers for ecs services

Primary LanguageHCLMIT LicenseMIT

Terraform module for creating Load Balancers for ECS services

Terraform module creates resources to load balance a ECS service, optional a listener and DNS recored can be created.

Terraform version

  • Terraform 0.12: Pin module to ~> 2+, submit pull request to branch develop
  • Terraform 0.11: Pin module to ~> 1.x, submit pull request to branch terrafomr011

Applicaton Load Balancers

The following scenario's are supported for creating a Load Balancer of type application

  • Internal vs External
  • SSL (HTTPS) vs HTTP
  • Disable the creation of a listener The default listener will return a fix response for traffic to / with a 404 - Not Found.

Example usages:

module "lb_no_ssl_public" {
  source      = "git::https://github.com/philips-software/terraform-aws-ecs-service-load-balancer.git"
  
  name_prefix = "public-"
  

  environment = var.environment
  project     = var.project
  name_suffix = var.project

  vpc_id   = module.vpc.vpc_id
  vpc_cidr = module.vpc.vpc_cidr
  subnets  = module.vpc.public_subnets
  type     = "application"
  internal = false

  port = 80
}

Network Load Balancer

Example usages:

module "lb_network" {
  source = "git::https://github.com/philips-software/terraform-aws-ecs-service-load-balancer.git"

  environment = var.environment
  project     = var.project
  name_suffix = var.project

  vpc_id   = module.vpc.vpc_id
  vpc_cidr = module.vpc.vpc_cidr
  subnets  = module.vpc.public_subnets
  type     = "network"
  internal = false
}

Inputs

Name Description Type Default Required
certificate_arn The AWS certificate ARN, required for an ALB via HTTPS. The certificate should be available in the same zone. string "" no
create_listener True to create a listener resource. Only for type application bool "true" no
dns_name The DNS name to connect to the load balancer if. string "" no
dns_zone_id The DNS zone id of the DNS. string "" no
enable_cross_zone_load_balancing If true, cross-zone load balancing of the load balancer will be enabled bool "false" no
environment Name of the environment (e.g. project-dev); will be prefixed to all resources. string n/a yes
internal If true this ALB is only available within the VPC, default (true) is publicly accessable (internetfacing). bool "true" no
name_prefix Prefix for load balancer name, string "lb-tf-" no
name_suffix Suffix which will be added to the name of resources and part of the tag name. string n/a yes
port The port for the listenere and ingress traffic, only applies for type application. string "" no
project Project cost center / cost allocation. string n/a yes
protocol Defines the ALB protocol to be used. string "" no
ssl_policy SSL policy applied to an SSL enabled LB, see https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html. Will only be applied for the type application and protocol HTTPS string "ELBSecurityPolicy-TLS-1-2-2017-01" no
subnets List of subnets to launch the LB. list(string) n/a yes
tags A map of tags to add to the resources map(string) <map> no
timeout The idle timeout in seconds of the ALB number "60" no
type Indication the type of a load balancer, possible values are: application and network. string "application" no
vpc_cidr CIDR block which will be applied to the sceurity group of the LB. In case the LB is marked as exteral the ingress rule allows traffic from anywhere. string "" no
vpc_id The VPC to launch the LB, e.g. needed for the security group and target group. string "" no

Outputs

Name Description
arn
lb_dns_name
listener_arn

Philips Forest

This module is part of the Philips Forest.

                                                     ___                   _
                                                    / __\__  _ __ ___  ___| |_
                                                   / _\/ _ \| '__/ _ \/ __| __|
                                                  / / | (_) | | |  __/\__ \ |_
                                                  \/   \___/|_|  \___||___/\__|  

                                                                 Infrastructure

Talk to the forestkeepers in the forest-channel on Slack.

Slack