FQDN for azurerm_firewall_network_rule_collection

[2mol]

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

Azure Firewall now supports setting FQDN rules (rules based on domain names) directly under the Network Rules. This is in addition to IP address rules and Service Tags.

It would be great to be able to set FQDN rules via Terraform.

For context, Network Security Groups accept strings like service tags in the destination address fields.

New or Affected Resource(s)

• azurerm_firewall_network_rule_collection

[annerajb]

No wonder I can't find it <_<.

Would also love to be able to set this on Terraform

[magodo]

@2mol and @annerajb Thank you for submitting this 👍
In order to enable FQDN on network rules, one will need to enable DNS proxy on the firewall.

Both functionalities are now in the preview state, accordingly, there is no dedicated property defined, for example, DNS setting. Instead, the current API put those settings in the additionalProperties, which is not ideal to be involved in provider codebase, unfortunately.

After this functionality is stabalized in API, then we shall begin to implement that.

[annerajb]

Ah thanks for reminding me about DNS settings on the firewall.

…

On Wed, Jul 15, 2020 at 4:17 AM magodo ***@***.***> wrote: @2mol <https://github.com/2mol> and @annerajb <https://github.com/annerajb> Thank you for submitting this 👍 In order to enable FQDN on network rules, one will need to enable DNS proxy on the firewall. Both functionalities are now in the preview state, accordingly, there is no dedicated property defined, for example, DNS setting. Instead, the current API put those settings in the additionalProperties, which is not ideal to be involved in provider codebase, unfortunately. After this functionality is stabalized in API, then we shall begin to implement that. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#7743 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAGXQXV2HW6WJWV5FL6VBQDR3VQ3JANCNFSM4OZPRU2A> .

[ghost]

This has been released in version 2.35.0 of the provider. Please see the Terraform documentation on provider versioning or reach out if you need any assistance upgrading. As an example:

provider "azurerm" {
    version = "~> 2.35.0"
}
# ... other configuration ...

[ghost]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.

If you feel this issue should be reopened, we encourage creating a new issue linking back to this one for added context. If you feel I made an error 🤖 🙉 , please reach out to my human friends 👉 [email protected]. Thanks!