Feature request-Support for Custom Traffic Selectors in Virtual Gateway Connection

[mindaugas-musnikas-Devoteam]

Is there an existing issue for this?

• I have searched the existing issues

Community Note

• Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request
• Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request
• If you are interested in working on this issue or have submitted a pull request, please leave a comment

Description

It would be highly beneficial to have support for custom traffic selectors in IPsec VPN connections within the terraform-azurerm-caf module. This feature would allow for more granular control over the traffic that is permitted through the VPN, enhancing security and flexibility.

Terraform AzureRM provider does support traffic_selector_policy since 3.5.0 (May 05, 2022) as per https://learn.microsoft.com/en-us/azure/developer/terraform/provider-version-history-azurerm

New or Affected Resource(s

azurerm_virtual_network_gateway_connection

Potential Configuration file

traffic_selector_policies = {
      traffic_selector_policy1 = {
        local_address_ranges = ["10.10.0.5"]
        remote_address_ranges = ["192.168.0.5"]
      }
      traffic_selector_policy2 = {
        local_address_ranges = ["10.10.0.6"]
        remote_address_ranges = ["192.168.0.6"]
      }
  }

References

https://learn.microsoft.com/en-us/azure/developer/terraform/provider-version-history-azurerm