Add option to deploy to Private Subnets for VPN Gateways when using NLB with AWS

AviatrixSystems / terraform-provider-aviatrix

Terraform Aviatrix provider

https://www.terraform.io/docs/providers/aviatrix/

Mozilla Public License 2.0

44 stars 50 forks source link

Add option to deploy to Private Subnets for VPN Gateways when using NLB with AWS #553

Open Merlz opened 4 years ago

Merlz commented 4 years ago

When deploying an LB for VPN Gateways, there is no need to deploy the gateways to public subnets, it goes against best practices when using Load Balancers since they should be the only public facing infrastructure and forwarding to internal subnets.

As another option, if using UDP protocol and NLB with Global Accelerator, then the NLB can be in private subnets as well to keep it completely internal on AWS Networks and reduce the attack surface even further.

CyrusJavan commented 3 years ago

Hi @Merlz, I think this feature request is related to the actual Aviatrix controller product, not the Terraform provider. I've gone ahead and opened a ticket on our internal issue tracker for this request. Thank you!