README

Sample architecture

N-Tier architecture service with a jumphost and a NAT instance. NAT instance is used for SNATing outbound from VMs in app-subnet.

How to run

Preparation

Download and install terraform: https://www.terraform.io/downloads.html

Update variables such as subscription_id and admin_name in variables.tf

Azure Service principal

Run following command to get a service principal info. Note that if you have multiple subscriptions then you should set right default subscription.

az account set -s <subscription_id>
az ad sp create-for-rbac --role="Contributor" --scopes="/subscriptions/<subscription_id>"

Run terraform

Initialize first,

terraform init

Then apply terraform

terraform apply

Feature highlight

1. VM login - ssh public key or password
2. Disk - OS disk with >30GiB and datadisk
3. OS image - default or custom image for building custom image, refer packer
4. Create multiple VMs
5. Setting LB
6. NAT instance - provision NAT instance, configure UDR and configure NAT using VM extension
7. ASG - create and apply ASG
8. Blob - create blob account and upload a file

For more information, please refer DOC.md

SNAT test

After provisioned, login to one of app vm through jump box and test source ip using following command

curl ipinfo.io

Reference

Azure

• provider: https://www.terraform.io/docs/providers/azurerm/

• example: https://github.com/terraform-providers/terraform-provider-azurerm/tree/master/examples

Terraform

• terraform syntax: https://www.terraform.io/docs/configuration/syntax.html

• iterpolation: https://www.terraform.io/docs/configuration/interpolation.html

Tips

• lb-pool associate vms: hashicorp/terraform#13663

• loops: https://blog.gruntwork.io/terraform-tips-tricks-loops-if-statements-and-gotchas-f739bbae55f9