https://github.com/epomatti/azure-firewall
Hub-spoke topology with Azure Firewall.
https://github.com/epomatti/azure-firewall
azure azure-firewall azure-security dnat firewall firewall-manager hub-spoke nat snat terraform vnet-peering
Last synced: 7 months ago
JSON representation
Hub-spoke topology with Azure Firewall.
- Host: GitHub
- URL: https://github.com/epomatti/azure-firewall
- Owner: epomatti
- License: mit
- Created: 2023-11-11T13:28:00.000Z (almost 2 years ago)
- Default Branch: main
- Last Pushed: 2023-11-11T22:27:25.000Z (almost 2 years ago)
- Last Synced: 2025-01-17T18:36:11.823Z (9 months ago)
- Topics: azure, azure-firewall, azure-security, dnat, firewall, firewall-manager, hub-spoke, nat, snat, terraform, vnet-peering
- Language: HCL
- Homepage:
- Size: 82 KB
- Stars: 0
- Watchers: 2
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# Azure Firewall
Hub-spoke topology with Azure Firewall.
## Setup
Copy the `.auto.tfvars` from the template:
```sh
cp config/sample.tfvars .auto.tfvars
```
Get your public IP address and add it to the `home_ips` variable. This will be used for `DNAT`:
```sh
dig +short myip.opendns.com @resolver1.opendns.com
```
Create the infrastructure:
```sh
terraform init
terraform apply -auto-approve
```
Check the policy rules to interact with the solution components.
Threat intelligence will be executed first in the policy lifecycle.
Firewall policy rule types will be processed in the following order:
1. DNAT
2. Network
3. Application
---
### Clean-up
```sh
terraform destroy -auto-approve
```