Skip to content

Commit 2d2d2f1

Browse files
chkp-romankachkp-romanka
authored
Merge pull request #359 from chkp-meravbe/mb-params
AWS | CFT & TF | Add support for Elastic Load Balancer Health Checks
2 parents 2c83279 + ecfaac8 commit 2d2d2f1

File tree

9 files changed

+57
-31
lines changed

9 files changed

+57
-31
lines changed

‎aws/templates/asg/autoscale.yaml

+3-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
AWSTemplateFormatVersion: 2010-09-09
2-
Description: Create an Auto Scaling group of Check Point gateways (20240204)
2+
Description: Create an Auto Scaling group of Check Point gateways (20240417)
33
Metadata:
44
AWS::CloudFormation::Interface:
55
ParameterGroups:
@@ -479,6 +479,8 @@ Resources:
479479
MaxSize: !Ref GatewaysMaxSize
480480
LoadBalancerNames: !If [CreateELB, [!Ref ElasticLoadBalancer], !Ref 'AWS::NoValue']
481481
TargetGroupARNs: !If [ProvidedTargetGroups, !Split [',', !Ref GatewaysTargetGroups], !Ref 'AWS::NoValue']
482+
HealthCheckGracePeriod: 3600
483+
HealthCheckType: ELB
482484
NotificationConfiguration: !If
483485
- ProvidedAdminEmail
484486
- TopicARN: !Ref NotificationTopic

‎aws/templates/management/management.yaml

+5-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
AWSTemplateFormatVersion: 2010-09-09
2-
Description: Deploys a Check Point Management Server (20240204)
2+
Description: Deploys a Check Point Management Server (20240417)
33
Metadata:
44
AWS::CloudFormation::Interface:
55
ParameterGroups:
@@ -446,6 +446,10 @@ Resources:
446446
IpProtocol: tcp
447447
FromPort: 18192
448448
ToPort: 18192
449+
- CidrIp: !Ref GatewaysAddresses
450+
IpProtocol: tcp
451+
FromPort: 18208
452+
ToPort: 18208
449453
- CidrIp: !Ref GatewaysAddresses
450454
IpProtocol: tcp
451455
FromPort: 18210

‎aws/templates/mds/mds.yaml

+5-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
AWSTemplateFormatVersion: '2010-09-09'
2-
Description: Deploys a Check Point Multi-Domain Server (20240204)
2+
Description: Deploys a Check Point Multi-Domain Server (20240417)
33
Metadata:
44
AWS::CloudFormation::Interface:
55
ParameterGroups:
@@ -414,6 +414,10 @@ Resources:
414414
IpProtocol: tcp
415415
FromPort: 18192
416416
ToPort: 18192
417+
- CidrIp: !Ref GatewaysAddresses
418+
IpProtocol: tcp
419+
FromPort: 18208
420+
ToPort: 18208
417421
- CidrIp: !Ref GatewaysAddresses
418422
IpProtocol: tcp
419423
FromPort: 18210

‎terraform/aws/autoscale-gwlb/README.md

+13-12
Original file line numberDiff line numberDiff line change
@@ -164,18 +164,19 @@ secret_key = "my-secret-key"
164164
## Revision History
165165
In order to check the template version, please refer to [sk116585](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116585)
166166
167-
| Template Version | Description |
168-
|------------------|---------------------------------------------------------------------------------------------------------------|
169-
| 20220414 | First release of Check Point Auto Scaling GWLB Terraform module for AWS |
170-
| 20220606 | New instance type support |
171-
| 20221123 | R81.20 version support |
172-
| 20221226 | Support ASG Launch Template instead of Launch Configuration |
173-
| 20230521 | - Change default shell for the admin user to /etc/cli.sh<br/>- Add description for reserved words in hostname |
174-
| 20230806 | Add support for c6in instance type |
175-
| 20230829 | Change default Check Point version to R81.20 |
176-
| 20230914 | Add support for maintenance mode password |
177-
| 20230923 | Add support for C5d instance type |
178-
| 20231012 | Update AWS Terraform provider version to 5.20.1 |
167+
| Template Version | Description |
168+
|------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------|
169+
| 20220414 | First release of Check Point Auto Scaling GWLB Terraform module for AWS |
170+
| 20220606 | New instance type support |
171+
| 20221123 | R81.20 version support |
172+
| 20221226 | Support ASG Launch Template instead of Launch Configuration |
173+
| 20230521 | - Change default shell for the admin user to /etc/cli.sh<br/>- Add description for reserved words in hostname |
174+
| 20230806 | Add support for c6in instance type |
175+
| 20230829 | Change default Check Point version to R81.20 |
176+
| 20230914 | Add support for maintenance mode password |
177+
| 20230923 | Add support for C5d instance type |
178+
| 20231012 | Update AWS Terraform provider version to 5.20.1 |
179+
| 20240414 | - Add support for Elastic Load Balancer Health Checks.<br/>- EC2 Auto Scaling will start to detect and act on health checks performed by Elastic Load Balancing. |
179180
180181
## License
181182

‎terraform/aws/autoscale-gwlb/main.tf

+2-1
Original file line numberDiff line numberDiff line change
@@ -84,7 +84,8 @@ resource "aws_autoscaling_group" "asg" {
8484
max_size = var.maximum_group_size
8585
target_group_arns = var.target_groups
8686
vpc_zone_identifier = var.subnet_ids
87-
health_check_grace_period = 0
87+
health_check_grace_period = 3600
88+
health_check_type = "ELB"
8889

8990
tag {
9091
key = "Name"

‎terraform/aws/autoscale/README.md

+15-14
Original file line numberDiff line numberDiff line change
@@ -176,20 +176,21 @@ secret_key = "my-secret-key"
176176
## Revision History
177177
In order to check the template version, please refer to [sk116585](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk116585)
178178
179-
| Template Version | Description |
180-
|------------------|--------------------------------------------------------------------|
181-
| 20200318 | First release of Check Point Auto Scaling Terraform module for AWS |
182-
| 20210309 | AWS Terraform modules refactor |
183-
| 20210329 | Stability fixes |
184-
| 20220606 | New instance type support |
185-
| 20221123 | R81.20 version support |
186-
| 20221226 | Support ASG Launch Template instead of Launch Configuration |
187-
| 20230521 | Change default shell for the admin user to /etc/cli.sh |
188-
| 20230806 | Add support for c6in instance type |
189-
| 20230829 | Change default Check Point version to R81.20 |
190-
| 20230914 | Add support for maintenance mode password |
191-
| 20230923 | Add support for C5d instance type |
192-
| 20231012 | Update AWS Terraform provider version to 5.20.1 |
179+
| Template Version | Description |
180+
|------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------|
181+
| 20200318 | First release of Check Point Auto Scaling Terraform module for AWS |
182+
| 20210309 | AWS Terraform modules refactor |
183+
| 20210329 | Stability fixes |
184+
| 20220606 | New instance type support |
185+
| 20221123 | R81.20 version support |
186+
| 20221226 | Support ASG Launch Template instead of Launch Configuration |
187+
| 20230521 | Change default shell for the admin user to /etc/cli.sh |
188+
| 20230806 | Add support for c6in instance type |
189+
| 20230829 | Change default Check Point version to R81.20 |
190+
| 20230914 | Add support for maintenance mode password |
191+
| 20230923 | Add support for C5d instance type |
192+
| 20231012 | Update AWS Terraform provider version to 5.20.1 |
193+
| 20240414 | - Add support for Elastic Load Balancer Health Checks.<br/>- EC2 Auto Scaling will start to detect and act on health checks performed by Elastic Load Balancing. |
193194
194195
## License
195196

‎terraform/aws/autoscale/main.tf

+2-1
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,8 @@ resource "aws_autoscaling_group" "asg" {
8383
load_balancers = aws_elb.proxy_elb.*.name
8484
target_group_arns = var.target_groups
8585
vpc_zone_identifier = var.subnet_ids
86-
health_check_grace_period = 0
86+
health_check_grace_period = 3600
87+
health_check_type = "ELB"
8788

8889
tag {
8990
key = "Name"

‎terraform/aws/management/main.tf

+6
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,12 @@ resource "aws_security_group" "management_sg" {
3838
protocol = "tcp"
3939
cidr_blocks = [var.gateway_addresses]
4040
}
41+
ingress {
42+
from_port = 18208
43+
to_port = 18208
44+
protocol = "tcp"
45+
cidr_blocks = [var.gateway_addresses]
46+
}
4147
ingress {
4248
from_port = 18210
4349
to_port = 18210

‎terraform/aws/mds/main.tf

+6
Original file line numberDiff line numberDiff line change
@@ -44,6 +44,12 @@ resource "aws_security_group" "mds_sg" {
4444
protocol = "tcp"
4545
cidr_blocks = [var.gateway_addresses]
4646
}
47+
ingress {
48+
from_port = 18208
49+
to_port = 18208
50+
protocol = "tcp"
51+
cidr_blocks = [var.gateway_addresses]
52+
}
4753
ingress {
4854
from_port = 18210
4955
to_port = 18210

0 commit comments

Comments
 (0)