Added - Support for NLB Transparent Mode(Non-SNAT Use Case)

Author: Terraform Team Automation

examples/network_load_balancer/network_load_balancer_full/nlb_full.tf

@@ -233,12 +233,62 @@ EOF
 
 /* Network Load Balancer */
 
+resource "oci_network_load_balancer_network_load_balancer" "nlb-symmetic" {
+  compartment_id = var.compartment_ocid
+
+  subnet_id = oci_core_subnet.subnet1.id
+
+  display_name = "nlb-symmetic"
+
+  is_preserve_source_destination = true
+  is_symmetric_hash_enabled = true
+}
+
+resource "oci_network_load_balancer_backend_set" "nlb-bes-symmetric" {
+  name                     = "nlb-bes-symmetric"
+  network_load_balancer_id = oci_network_load_balancer_network_load_balancer.nlb-symmetic.id
+  policy                   = "TWO_TUPLE"
+
+  health_checker {
+    port                = "8090"
+    protocol            = "TCP"
+    request_data        = "SGVsbG9Xb3JsZA=="
+    response_data       = "SGVsbG9Xb3JsZA=="
+    timeout_in_millis   = 10000
+    interval_in_millis  = 10000
+    retries             = 3
+  }
+  depends_on = [oci_network_load_balancer_network_load_balancer.nlb-symmetic]
+}
+
+resource "oci_network_load_balancer_listener" "nlb-listener-symmetric" {
+  network_load_balancer_id    = oci_network_load_balancer_network_load_balancer.nlb-symmetic.id
+  name                        = "tcp_listener_symmetric"
+  default_backend_set_name    = oci_network_load_balancer_backend_set.nlb-bes-symmetric.name
+  port                        = 80
+  protocol                    = "TCP"
+  depends_on = [oci_network_load_balancer_backend_set.nlb-bes-symmetric]
+}
+
+resource "oci_network_load_balancer_backend" "nlb-be-symmetic" {
+  network_load_balancer_id = oci_network_load_balancer_network_load_balancer.nlb-symmetic.id
+  backend_set_name         = oci_network_load_balancer_backend_set.nlb-bes-symmetric.name
+  ip_address               = "10.1.20.2"
+  port                     = 80
+  is_backup                = false
+  is_drain                 = false
+  is_offline               = false
+  weight                   = 1
+  depends_on = [oci_network_load_balancer_listener.nlb-listener-symmetric]
+}
+
 resource "oci_network_load_balancer_network_load_balancer" "nlb1" {
   compartment_id = var.compartment_ocid
 
   subnet_id = oci_core_subnet.subnet1.id
 
   display_name = "nlb1"
+  is_symmetric_hash_enabled = false
 }
 
 resource "oci_network_load_balancer_backend_set" "nlb-bes1" {
@@ -255,6 +305,7 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes1" {
     interval_in_millis  = 10000
     retries             = 3
   }
+  depends_on = [oci_network_load_balancer_network_load_balancer.nlb1]
 }
 
 resource "oci_network_load_balancer_backend_set" "nlb-bes2" {
@@ -272,6 +323,7 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes2" {
     interval_in_millis  = 10000
     retries             = 3
   }
+  depends_on   = [oci_network_load_balancer_backend_set.nlb-bes1]
 }
 
 resource "oci_network_load_balancer_backend_set" "nlb-bes3" {
@@ -289,6 +341,7 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes3" {
     interval_in_millis  = 10000
     retries             = 3
   }
+  depends_on = [oci_network_load_balancer_backend_set.nlb-bes2]
 }
 
 resource "oci_network_load_balancer_listener" "nlb-listener1" {
@@ -297,6 +350,7 @@ resource "oci_network_load_balancer_listener" "nlb-listener1" {
   default_backend_set_name    = oci_network_load_balancer_backend_set.nlb-bes1.name
   port                        = 80
   protocol                    = "TCP"
+  depends_on = [oci_network_load_balancer_backend_set.nlb-bes3]
 }
 
 resource "oci_network_load_balancer_listener" "nlb-listener2" {
@@ -305,25 +359,28 @@ resource "oci_network_load_balancer_listener" "nlb-listener2" {
   default_backend_set_name    = oci_network_load_balancer_backend_set.nlb-bes2.name
   port                        = 80
   protocol                    = "UDP"
+  depends_on = [oci_network_load_balancer_listener.nlb-listener1]
 }
 
 resource "oci_network_load_balancer_listener" "nlb-listener3" {
   network_load_balancer_id    = oci_network_load_balancer_network_load_balancer.nlb1.id
   name                        = "tcp_and_udp_listener"
   default_backend_set_name    = oci_network_load_balancer_backend_set.nlb-bes3.name
-  port                        = 80
+  port                        = 8080
   protocol                    = "TCP_AND_UDP"
+  depends_on = [oci_network_load_balancer_listener.nlb-listener2]
 }
 
 resource "oci_network_load_balancer_backend" "nlb-be1" {
   network_load_balancer_id = oci_network_load_balancer_network_load_balancer.nlb1.id
   backend_set_name         = oci_network_load_balancer_backend_set.nlb-bes1.name
-  ip_address               = "10.0.0.3"
+  ip_address               = "10.1.20.1"
   port                     = 80
   is_backup                = false
   is_drain                 = false
   is_offline               = false
   weight                   = 1
+  depends_on = [oci_network_load_balancer_listener.nlb-listener3]
 }
 
 resource "oci_network_load_balancer_backend" "nlb-be2" {
@@ -335,6 +392,7 @@ resource "oci_network_load_balancer_backend" "nlb-be2" {
   is_drain                 = false
   is_offline               = false
   weight                   = 1
+  depends_on = [oci_network_load_balancer_backend.nlb-be1]
 }
 
 
@@ -376,6 +434,7 @@ resource "oci_network_load_balancer_backend_set" "nlb-bes-ipv6" {
     interval_in_millis  = 10000
     retries             = 3
   }
+  depends_on = [oci_network_load_balancer_network_load_balancer.nlb-ipv6]
 }
 
 resource "oci_network_load_balancer_listener" "nlb-listener-ipv6" {
@@ -385,6 +444,7 @@ resource "oci_network_load_balancer_listener" "nlb-listener-ipv6" {
   port                        = 80
   protocol                    = "TCP"
   ip_version                  = "IPV6"
+  depends_on = [oci_network_load_balancer_backend_set.nlb-bes-ipv6]
 }
 
 resource "oci_network_load_balancer_backend" "nlb-be-ipv6" {
@@ -396,4 +456,5 @@ resource "oci_network_load_balancer_backend" "nlb-be-ipv6" {
   is_drain                 = false
   is_offline               = false
   weight                   = 1
-}
+  depends_on = [oci_network_load_balancer_listener.nlb-listener-ipv6]
+} 

internal/integrationtest/network_load_balancer_network_load_balancer_test.go

@@ -46,6 +46,10 @@ var (
 		"values": acctest.Representation{RepType: acctest.Required, Create: []string{`${oci_network_load_balancer_network_load_balancer.test_network_load_balancer.id}`}},
 	}
 
+	ignoreNlbDefinedTagsChangesRepresentation = map[string]interface{}{
+		"ignore_changes": acctest.Representation{RepType: acctest.Required, Create: []string{`defined_tags`}},
+	}
+
 	NetworkLoadBalancerNetworkLoadBalancerRepresentation = map[string]interface{}{
 		"compartment_id":                 acctest.Representation{RepType: acctest.Required, Create: `${var.compartment_id}`},
 		"display_name":                   acctest.Representation{RepType: acctest.Required, Create: `displayName`, Update: `displayName2`},
@@ -54,9 +58,11 @@ var (
 		"freeform_tags":                  acctest.Representation{RepType: acctest.Optional, Create: map[string]string{"Department": "Finance"}, Update: map[string]string{"Department": "Accounting"}},
 		"is_preserve_source_destination": acctest.Representation{RepType: acctest.Optional, Create: `false`, Update: `true`},
 		"is_private":                     acctest.Representation{RepType: acctest.Optional, Create: `false`},
+		"is_symmetric_hash_enabled":      acctest.Representation{RepType: acctest.Optional, Create: `false`, Update: `true`},
 		"nlb_ip_version":                 acctest.Representation{RepType: acctest.Optional, Create: `IPV4`, Update: `IPV4_AND_IPV6`},
 		"network_security_group_ids":     acctest.Representation{RepType: acctest.Optional, Create: []string{`${oci_core_network_security_group.test_network_security_group.id}`}},
 		"reserved_ips":                   acctest.RepresentationGroup{RepType: acctest.Optional, Group: networkLoadBalancerReservedIpsRepresentation},
+		"lifecycle":                      acctest.RepresentationGroup{RepType: acctest.Required, Group: ignoreNlbDefinedTagsChangesRepresentation},
 	}
 	networkLoadBalancerRepresentationIpv6 = map[string]interface{}{
 		"compartment_id":                 acctest.Representation{RepType: acctest.Required, Create: `${var.compartment_id}`},
@@ -68,6 +74,7 @@ var (
 		"is_private":                     acctest.Representation{RepType: acctest.Optional, Create: `false`},
 		"nlb_ip_version":                 acctest.Representation{RepType: acctest.Optional, Create: `IPV4_AND_IPV6`},
 		"network_security_group_ids":     acctest.Representation{RepType: acctest.Optional, Create: []string{`${oci_core_network_security_group.test_network_security_group.id}`}},
+		"lifecycle":                      acctest.RepresentationGroup{RepType: acctest.Required, Group: ignoreNlbDefinedTagsChangesRepresentation},
 	}
 	networkLoadBalancerReservedIpsRepresentation = map[string]interface{}{
 		"id": acctest.Representation{RepType: acctest.Optional, Create: `${oci_core_public_ip.test_public_ip.id}`},
@@ -173,6 +180,7 @@ func TestNetworkLoadBalancerNetworkLoadBalancerResource_basic(t *testing.T) {
 				resource.TestCheckResourceAttrSet(resourceName, "id"),
 				resource.TestCheckResourceAttr(resourceName, "is_preserve_source_destination", "false"),
 				resource.TestCheckResourceAttr(resourceName, "is_private", "false"),
+				resource.TestCheckResourceAttr(resourceName, "is_symmetric_hash_enabled", "false"),
 				resource.TestCheckResourceAttr(resourceName, "nlb_ip_version", "IPV4"),
 				resource.TestCheckResourceAttr(resourceName, "ip_addresses.#", "1"),
 				resource.TestCheckResourceAttr(resourceName, "ip_addresses.0.is_public", "true"),
@@ -209,6 +217,7 @@ func TestNetworkLoadBalancerNetworkLoadBalancerResource_basic(t *testing.T) {
 				resource.TestCheckResourceAttrSet(resourceName, "id"),
 				resource.TestCheckResourceAttr(resourceName, "is_preserve_source_destination", "false"),
 				resource.TestCheckResourceAttr(resourceName, "is_private", "false"),
+				resource.TestCheckResourceAttr(resourceName, "is_symmetric_hash_enabled", "false"),
 				resource.TestCheckResourceAttr(resourceName, "nlb_ip_version", "IPV4"),
 				resource.TestCheckResourceAttrSet(resourceName, "ip_addresses.0.ip_address"),
 				resource.TestCheckResourceAttrSet(resourceName, "ip_addresses.0.reserved_ip.0.id"),
@@ -240,6 +249,7 @@ func TestNetworkLoadBalancerNetworkLoadBalancerResource_basic(t *testing.T) {
 				resource.TestCheckResourceAttr(resourceName, "ip_addresses.0.is_public", "false"),
 				resource.TestCheckResourceAttr(resourceName, "is_preserve_source_destination", "true"),
 				resource.TestCheckResourceAttr(resourceName, "is_private", "false"),
+				resource.TestCheckResourceAttr(resourceName, "is_symmetric_hash_enabled", "true"),
 				resource.TestCheckResourceAttr(resourceName, "nlb_ip_version", "IPV4_AND_IPV6"),
 				resource.TestCheckResourceAttr(resourceName, "ip_addresses.#", "2"),
 				resource.TestCheckResourceAttrSet(resourceName, "state"),
@@ -320,6 +330,7 @@ func TestNetworkLoadBalancerNetworkLoadBalancerResource_basic(t *testing.T) {
 				resource.TestCheckResourceAttr(singularDatasourceName, "ip_addresses.0.is_public", "false"),
 				resource.TestCheckResourceAttr(singularDatasourceName, "is_preserve_source_destination", "true"),
 				resource.TestCheckResourceAttr(singularDatasourceName, "is_private", "false"),
+				resource.TestCheckResourceAttr(singularDatasourceName, "is_symmetric_hash_enabled", "true"),
 				resource.TestCheckResourceAttr(singularDatasourceName, "nlb_ip_version", "IPV4_AND_IPV6"),
 				resource.TestCheckResourceAttrSet(singularDatasourceName, "state"),
 				resource.TestCheckResourceAttrSet(singularDatasourceName, "time_created"),

internal/service/network_load_balancer/network_load_balancer_network_load_balancer_data_source.go

@@ -94,6 +94,10 @@ func (s *NetworkLoadBalancerNetworkLoadBalancerDataSourceCrud) SetData() error {
 		s.D.Set("is_private", *s.Res.IsPrivate)
 	}
 
+	if s.Res.IsSymmetricHashEnabled != nil {
+		s.D.Set("is_symmetric_hash_enabled", *s.Res.IsSymmetricHashEnabled)
+	}
+
 	if s.Res.LifecycleDetails != nil {
 		s.D.Set("lifecycle_details", *s.Res.LifecycleDetails)
 	}

internal/service/network_load_balancer/network_load_balancer_network_load_balancer_resource.go

@@ -70,6 +70,11 @@ func NetworkLoadBalancerNetworkLoadBalancerResource() *schema.Resource {
 				Computed: true,
 				ForceNew: true,
 			},
+			"is_symmetric_hash_enabled": {
+				Type:     schema.TypeBool,
+				Optional: true,
+				Computed: true,
+			},
 			"network_security_group_ids": {
 				Type:     schema.TypeSet,
 				Optional: true,
@@ -277,6 +282,11 @@ func (s *NetworkLoadBalancerNetworkLoadBalancerResourceCrud) Create() error {
 		request.IsPrivate = &tmp
 	}
 
+	if isSymmetricHashEnabled, ok := s.D.GetOkExists("is_symmetric_hash_enabled"); ok {
+		tmp := isSymmetricHashEnabled.(bool)
+		request.IsSymmetricHashEnabled = &tmp
+	}
+
 	if networkSecurityGroupIds, ok := s.D.GetOkExists("network_security_group_ids"); ok {
 		set := networkSecurityGroupIds.(*schema.Set)
 		interfaces := set.List()
@@ -507,6 +517,11 @@ func (s *NetworkLoadBalancerNetworkLoadBalancerResourceCrud) Update() error {
 		request.IsPreserveSourceDestination = &tmp
 	}
 
+	if isSymmetricHashEnabled, ok := s.D.GetOkExists("is_symmetric_hash_enabled"); ok {
+		tmp := isSymmetricHashEnabled.(bool)
+		request.IsSymmetricHashEnabled = &tmp
+	}
+
 	tmp := s.D.Id()
 	request.NetworkLoadBalancerId = &tmp
 	if nlbIpVersion, ok := s.D.GetOkExists("nlb_ip_version"); ok {
@@ -572,6 +587,10 @@ func (s *NetworkLoadBalancerNetworkLoadBalancerResourceCrud) SetData() error {
 		s.D.Set("is_private", *s.Res.IsPrivate)
 	}
 
+	if s.Res.IsSymmetricHashEnabled != nil {
+		s.D.Set("is_symmetric_hash_enabled", *s.Res.IsSymmetricHashEnabled)
+	}
+
 	if s.Res.LifecycleDetails != nil {
 		s.D.Set("lifecycle_details", *s.Res.LifecycleDetails)
 	}
@@ -656,6 +675,10 @@ func NetworkLoadBalancerSummaryToMap(obj oci_network_load_balancer.NetworkLoadBa
 		result["is_private"] = bool(*obj.IsPrivate)
 	}
 
+	if obj.IsSymmetricHashEnabled != nil {
+		result["is_symmetric_hash_enabled"] = bool(*obj.IsSymmetricHashEnabled)
+	}
+
 	if obj.LifecycleDetails != nil {
 		result["lifecycle_details"] = string(*obj.LifecycleDetails)
 	}