hashicorp / terraform-provider-aws

The AWS Provider enables Terraform to manage AWS resources.
https://registry.terraform.io/providers/hashicorp/aws
Mozilla Public License 2.0
9.77k stars 9.12k forks source link

[Enhancement]: Elastic Network Interface configurable idle timeout for connection tracking #36799

Open flipsed opened 6 months ago

flipsed commented 6 months ago

Description

In November last year, aws introduced configurable idle timeout on the network interfaces. It would a great enhancement to be able to customise this in the aws_network_interface resource.

Affected Resource(s) and/or Data Source(s)

aws_network_interface

Potential Terraform Configuration

resource "aws_network_interface" "test" {
  subnet_id       = aws_subnet.public_a.id
  private_ips     = ["10.0.0.50"]
  security_groups = [aws_security_group.web.id]
  idle_timeout    = 432000

  attachment {
    instance     = aws_instance.test.id
    device_index = 1
  }
}

References

https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-configurable-idle-timeout-for-connection-tracking/

https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts

in this blog post AWS recommends tuning the timeout all the way down to 45s, given the a 2h default timeout for idle TCP connections is very high https://aws.amazon.com/blogs/networking-and-content-delivery/implementing-long-running-tcp-connections-within-vpc-networking/

Would you like to implement a fix?

No

github-actions[bot] commented 6 months ago

Community Note

Voting for Prioritization

Volunteering to Work on This Issue