{"id":1793,"date":"2024-04-30T00:58:51","date_gmt":"2024-04-30T00:58:51","guid":{"rendered":"https:\/\/www.nicktailor.com\/?p=1793"},"modified":"2024-05-02T01:29:55","modified_gmt":"2024-05-02T01:29:55","slug":"how-to-deploy-another-vpc-in-aws-with-scalable-ec2-for-ha","status":"publish","type":"post","link":"https:\/\/nicktailor.com\/tech-blog\/how-to-deploy-another-vpc-in-aws-with-scalable-ec2-for-ha\/","title":{"rendered":"How to Deploy Another VPC in AWS with Scalable EC2’s for HA using Terraform"},"content":{"rendered":"
\n
\n
\u2022<\/span>\u00a0<\/span>This will configure a new VPC<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Create a new subnet for use<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Create a new security group with bunch rules<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Create a key pair for your new instances<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Allow you to scale your instances cleanly use the count attribute.<\/div>\n<\/div>\n<\/div>\n

So we are going to do this a bit different than the other post. As the other post is just deploying one instance in an existing VPC.<\/p>\n

This one is more fun. The structure we will use this time will allow you to scale your ec2 instances very cleanly. If you are using git repos to push out changes. Then having a main.tf for your instance is much simpler to manage at scale.<\/p>\n

File structure:<\/strong><\/span><\/p>\n

terraform-project\/<\/p>\n

\u251c\u2500\u2500 main.tf <– Your main configuration file<\/p>\n

\u251c\u2500\u2500 variables.tf <– Variables file that has the inputs to pass<\/p>\n

\u251c\u2500\u2500 outputs.tf <– Outputs file<\/p>\n

\u251c\u2500\u2500 security_group.tf <– File containing security group rules<\/p>\n

\u2514\u2500\u2500 modules\/<\/p>\n

\u2514\u2500\u2500 instance\/<\/p>\n

\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u251c\u2500\u2500 main.tf <- this file contains your ec2 instances<\/p>\n

\u2514\u2500\u2500 variables.tf <- variable file that defines we will pass for the module in main.tf to use<\/p>\n

.<\/span><\/span><\/p>\n

Explaining the process:<\/p>\n

Main.tf<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>We have defined the provider and availability zone; if you have more than one cloud, then its good create a provider.tf and carve them out.\u00a0<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>The key-pair to import into aws in the second availability zone that was generated locally in my terraform directory using.<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>ssh-keygen -t rsa -b 2048 -f .\/terraform-aws-key<\/em><\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>We are then saying lets create a new vpc called vpc2<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>with the subnet cidr block 10.0.1.0\/24 to use internally<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>this will also map the public address to the new internal address assigned upon launch<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>We will be creating servers using variables defined in the variables.tf<\/div>\n
\n
\n
\u25e6<\/span>\u00a0<\/span>Instance type<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>AMID<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>key_pair name to use<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>new subnet to use<\/div>\n<\/div>\n
\n
\u25e6<\/span>\u00a0<\/span>and assign the new security group to the ec2 instance deployed<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>We also added a count on the module so when we deploy ec2\u2019s we can simply adjust the count number and pushed the code with a one tiny change as opposed to an entire block. You will see what I mean later.<\/strong><\/div>\n
main.tf<\/strong><\/span><\/div>\n<\/div>\n<\/div>\n

provider<\/span> “<\/span>aws<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>region <\/span>=<\/span> “us-west-2”<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

resource<\/span> “<\/span>aws_key_pair<\/span>“<\/span> “my-nick-test-key”<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>key_name<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> “my-nick-test-key”<\/span><\/p>\n

\u00a0\u00a0<\/span>public_key<\/span> =<\/span> file<\/span>(<\/span>“<\/span>${<\/span>path<\/span>.<\/span>module<\/span>}<\/span>\/terraform-aws-key.pub”<\/span>)<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

resource<\/span> “<\/span>aws_vpc<\/span>“<\/span> “vpc2”<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>cidr_block<\/span> =<\/span> “10.0.0.0\/16”<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

resource<\/span> “<\/span>aws_subnet<\/span>“<\/span> “<\/span>newsubnet<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>vpc_id<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> aws_vpc<\/span>.<\/span>vpc2<\/span>.<\/span>id<\/span><\/p>\n

\u00a0\u00a0<\/span>cidr_block<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> “10.0.1.0\/24”<\/span><\/p>\n

\u00a0\u00a0<\/span>map_public_ip_on_launch<\/span> =<\/span> true<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

module<\/span> “<\/span>web_server<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>source \u00a0 \u00a0 \u00a0 \u00a0 \u00a0 <\/span>=<\/span> “.\/<\/span>module\/instance”<\/span><\/p>\n

\u00a0\u00a0<\/span>ami_id<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>ami_id<\/span><\/p>\n

\u00a0\u00a0<\/span>instance_type<\/span>\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>instance<\/span>_type<\/span><\/p>\n

\u00a0\u00a0<\/span>key_name<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>key_name_instance<\/span><\/p>\n

\u00a0\u00a0<\/span>subnet_id<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> aws_subnet<\/span>.<\/span>newsubnet<\/span>.<\/span>id<\/span><\/p>\n

\u00a0\u00a0<\/span>instance_count<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2<\/span>\u00a0\u00a0<\/span>\/<\/span>\/ Specify the number of instances you want<\/span><\/strong><\/p>\n

\u00a0\u00a0<\/span>security_group_id<\/span> =<\/span> aws_security_group<\/span>.<\/span>newcpanel<\/span>.<\/span>id<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Variables.tf<\/strong><\/span><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>Here we define the variables we want to pass to the module in main.tf for the instance.<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>The linux image<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Instance type (size of the machine)<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>Key-pair to use for the image<\/div>\n<\/div>\n<\/div>\n

variable<\/span> “<\/span>ami_id<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “The AMI ID for the instance”<\/span><\/p>\n

\u00a0\u00a0<\/span>default \u00a0 \u00a0 <\/span>=<\/span> “ami-0913c47048d853921”<\/span> \/\/ Amazon Linux 2 AMI ID<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

variable<\/span> “<\/span>instance_type<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “The instance type for the instance”<\/span><\/p>\n

\u00a0\u00a0<\/span>default \u00a0 \u00a0 <\/span>=<\/span> “t<\/span>2.micro<\/span>“<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

variable<\/span> “<\/span>key_name_instance<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “The key pair name for the instance”<\/span><\/p>\n

\u00a0\u00a0<\/span>default \u00a0 \u00a0 <\/span>=<\/span> “my-nick-test-key”<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Security_group.tf<\/strong><\/span><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>This will create a new security group in the us-west-2 with inbound rules similar to cpanel with the name newcpanel<\/div>\n<\/div>\n<\/div>\n

resource<\/span> “<\/span>aws_security_group<\/span>“<\/span> “<\/span>newcpanel<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>name \u00a0 \u00a0 \u00a0 \u00a0<\/span>=<\/span> “<\/span>newcpanel<\/span>“<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “Allow inbound traffic”<\/span><\/p>\n

\u00a0\u00a0<\/span>vpc_id<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> aws_vpc<\/span>.<\/span>vpc2<\/span>.<\/span>id<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ POP3 TCP 110<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 110<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 110<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 20<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 20<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 20<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 587<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 587<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 587<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ DNS (TCP) TCP 53<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 53<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 53<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ SMTPS TCP 465<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 465<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 465<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ HTTPS TCP 443<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 443<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 443<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ DNS (UDP) UDP 53<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 53<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 53<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>udp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ IMAP TCP 143<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 143<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 143<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ IMAPS TCP 993<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 993<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 993<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 21<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 21<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 21<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2086<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2086<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2086<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2096<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2096<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2096<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ HTTP TCP 80<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 80<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 80<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ SSH TCP 22<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 22<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 22<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ POP3S TCP 995<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 995<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 995<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2083<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2083<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2083<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2087<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2087<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2087<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2095<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2095<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2095<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>\/\/ Custom TCP 2082<\/span><\/p>\n

\u00a0\u00a0<\/span>ingress<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>from_port<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2082<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>to_port<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 2082<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>protocol \u00a0 \u00a0<\/span>=<\/span> “<\/span>tcp<\/span>“<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>cidr_blocks<\/span> =<\/span> [<\/span>“0.0.0.0\/0”<\/span>]<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

}<\/span><\/p>\n

output<\/span> “<\/span>newcpanel_sg_id<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>value \u00a0 \u00a0 \u00a0 <\/span>=<\/span> aws_security_group<\/span>.<\/span>newcpanel<\/span>.<\/span>id<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “The ID of the security group ‘<\/span>newcpanel<\/span>‘”<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

.<\/span><\/span><\/p>\n

Outputs.tf<\/strong><\/span><\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>We want some information to be outputted upon creating the machines like the assigned public addresses. In terraform it needs somethings outputted for the checks to work. In ansible arent forced to do this, but it looks like in terraform you are.<\/div>\n<\/div>\n<\/div>\n

output<\/span> “<\/span>public_ips<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>value \u00a0 \u00a0 \u00a0 <\/span>=<\/span> module<\/span>.<\/span>web_<\/span>server<\/span>.<\/span>public<\/span>_ips<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “List of public IP addresses for the instances.”<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Okay so now we want to create the scalable ec2<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>Up on deployment in the us-west-2 which essentially is for HA purposes.<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>You want the key pair to used<\/div>\n<\/div>\n
\n
\u2022<\/span>\u00a0<\/span>And the security group we defined earlier to be added the instance.<\/div>\n<\/div>\n<\/div>\n

We create a modules\/instance<\/strong> directory and inside here define the instances as resources<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>Now there are a couple of ways to do this. Depends on how you grew your infrastructure out. If all your machines are the same then you don\u2019t need a resource block for each instance which can make the code uglier to manage. You can use the count attribute to simply add or subtract inside the main.tf where the instance_count is defined under the module \u00a0<\/span>instance_count<\/span>\u00a0\u00a0\u00a0<\/span>=<\/span> 2<\/span><\/strong><\/div>\n<\/div>\n<\/div>\n

modules\/instance\/main.tf <\/strong><\/span><\/p>\n

resource<\/span> “<\/span>aws_instance<\/span>“<\/span> “Tailor-Server”<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>count \u00a0 \u00a0 \u00a0 \u00a0 \u00a0<\/span>=<\/span> var<\/span>.<\/span>instance<\/span>_count<\/span>\u00a0\u00a0<\/span>\/\/ Control the number of instances with a variable<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>ami<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>ami_id<\/span><\/p>\n

\u00a0\u00a0<\/span>instance_<\/span>type<\/span>\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>instance_type<\/span><\/p>\n

\u00a0\u00a0<\/span>subnet_id<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>subnet<\/span>_id<\/span><\/p>\n

\u00a0\u00a0<\/span>key_name<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> var<\/span>.<\/span>key_name<\/span><\/p>\n

\u00a0\u00a0<\/span>vpc_security_group_ids<\/span> =<\/span> [<\/span>var<\/span>.<\/span>security<\/span>_group_id<\/span>]<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>tags <\/span>=<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>Name = <\/span>format<\/span>(<\/span>“Tailor-Server%02d”<\/span>,<\/span> count<\/span>.<\/span>index<\/span> +<\/span> 1<\/span>)<\/span>\u00a0\u00a0<\/span>\/\/ Naming instances with a sequential number<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>root_block_device<\/span> {<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>volume_type<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> “gp2”<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>volume_size<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>=<\/span> 30<\/span><\/p>\n

\u00a0\u00a0\u00a0\u00a0<\/span>delete_on_termination<\/span> =<\/span> true<\/span><\/p>\n

\u00a0 }<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Modules\/instance\/variables.tf<\/strong><\/span><\/p>\n

Each variable serves as an input that can be set externally when the module is called, allowing for flexibility and reusability of the module across different environments or scenarios.<\/p>\n

So here we defining it as a list of items we need to pass for the module to work. We will later provide the actual parameter to pass to the variables being called in the main.tf<\/p>\n

Cheat sheet:<\/p>\n

ami_id<\/strong>: Specifies the Amazon Machine Image (AMI) ID that will be used to launch the EC2 instances. The AMI determines the operating system and software configurations that will be loaded onto the instances when they are created.<\/p>\n

instance_type<\/strong>: Determines the type of EC2 instance to launch. This affects the computing resources available to the instance (CPU, memory, etc.).<\/p>\n

Type: It is expected to be a string that matches one of AWS’s predefined instance types (e.g., t2.micro, m5.large).<\/p>\n

key_name<\/strong>: Specifies the name of the key pair to be used for SSH access to the EC2 instances. This key should already exist in the AWS account.<\/p>\n

subnet_id<\/strong>: Identifies the subnet within which the EC2 instances will be launched. The subnet is part of a specific VPC (Virtual Private Cloud).<\/p>\n

instance_names<\/strong>: A list of names to be assigned to the instances. This helps in identifying the instances within the AWS console or when querying using the AWS CLI.<\/p>\n

security_group_Id<\/strong>: Specifies the ID of the security group to attach to the EC2 instances. Security groups act as a virtual firewall for your instances to control inbound and outbound traffic.<\/p>\n

\n
\n
\u2022<\/span>\u00a0<\/span>We are also adding a count here so we can scale ec2 very efficiently, especially if you have a lot of hands working in the pot keeps things very easy to manage.<\/div>\n<\/div>\n<\/div>\n

variable<\/span> “<\/span>ami_id<\/span>“<\/span> {}<\/span><\/p>\n

variable<\/span> “<\/span>instance_type<\/span>“<\/span> {}<\/span><\/p>\n

variable<\/span> “<\/span>key_name<\/span>“<\/span> {}<\/span><\/p>\n

variable<\/span> “<\/span>subnet_id<\/span>“<\/span> {}<\/span><\/p>\n

variable<\/span> “<\/span>instance_names<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>type \u00a0 \u00a0 \u00a0 \u00a0<\/span>=<\/span> list<\/span>(<\/span>string<\/span>)<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “List of names for the instances to create.”<\/span><\/p>\n

}<\/span><\/p>\n

variable<\/span> “<\/span>security_group_id<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “Security group ID to assign to the instance”<\/span><\/p>\n

\u00a0\u00a0<\/span>type \u00a0 \u00a0 \u00a0 \u00a0<\/span>=<\/span> string<\/span><\/p>\n

}<\/span><\/p>\n

variable<\/span> “<\/span>instance_count<\/span>“<\/span> {<\/span><\/p>\n

\u00a0\u00a0<\/span>description <\/span>=<\/span> “The number of instances to create”<\/span><\/p>\n

\u00a0\u00a0<\/span>type \u00a0 \u00a0 \u00a0 \u00a0<\/span>=<\/span> number<\/span><\/p>\n

\u00a0\u00a0<\/span>default \u00a0 \u00a0 <\/span>=<\/span> 1<\/span>\u00a0\u00a0<\/span>\/<\/span>\/ Default to one instance if not specified<\/span><\/p>\n

}<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Time to deploy your<\/strong> code: <\/strong>I didnt bother showing the plan here just the apply<\/em><\/p>\n

my-terraform-vpc$ terraform apply<\/p>\n

Do<\/span> you<\/span> want<\/span> to<\/span> perform<\/span> these<\/span> actions?<\/span><\/p>\n

\u00a0\u00a0<\/span>Terraform<\/span> will<\/span> perform<\/span> the<\/span> actions<\/span> described<\/span> above.<\/span><\/p>\n

\u00a0\u00a0<\/span>Only<\/span> ‘yes’<\/span> will<\/span> be<\/span> accepted<\/span> to<\/span> approve.<\/span><\/p>\n

.<\/span><\/span><\/p>\n

\u00a0\u00a0<\/span>Enter<\/span> a<\/span> value:<\/span> yes<\/span><\/p>\n

.<\/span><\/span><\/p>\n

aws_<\/span>subnet.newsubnet<\/span>:<\/span> Destroying…<\/span> [id=subnet-016181a8999a58cb4]<\/span><\/p>\n

aws_<\/span>subnet.newsubnet<\/span>:<\/span> Destruction<\/span> complete<\/span> after<\/span> 1<\/span>s<\/span><\/p>\n

aws_<\/span>subnet.newsubnet<\/span>:<\/span> Creating…<\/span><\/p>\n

aws_<\/span>subnet.newsubnet<\/span>:<\/span> Still<\/span> creating…<\/span> [10s <\/span>elapsed]<\/span><\/p>\n

aws_<\/span>subnet.newsubnet<\/span>:<\/span> Creation<\/span> complete<\/span> after<\/span> 11<\/span>s<\/span> [id=subnet-0a5914443d2944510]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Creating…<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Creating…<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [10s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Still<\/span> creating…<\/span> [10s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Still<\/span> creating…<\/span> [20s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [20s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [30s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Still<\/span> creating…<\/span> [30s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Still<\/span> creating…<\/span> [40s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [40s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [50s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Still<\/span> creating…<\/span> [50s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[0]:<\/span> Creation<\/span> complete<\/span> after<\/span> 52<\/span>s<\/span> [id=i-0d103937dcd1ce080]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [1m0s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Still<\/span> creating…<\/span> [1m10s <\/span>elapsed]<\/span><\/p>\n

module.web_server.aws_<\/span>instance.Tailor<\/span>-Server[1]:<\/span> Creation<\/span> complete<\/span> after<\/span> 1<\/span>m12s<\/span> [id=i-071bac658ce51d415]<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Apply<\/span> complete!<\/span> Resources:<\/span> 3<\/span> added,<\/span> 0<\/span> changed,<\/span> 1<\/span> destroyed.<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Outputs:<\/span><\/p>\n

.<\/span><\/span><\/p>\n

newcpanel_sg_id<\/span> =<\/span> “sg-0df86c53b5de7b348”<\/span><\/p>\n

public_ips<\/span> =<\/span> [<\/span><\/p>\n

\u00a0\u00a0<\/span>“34.219.34.165”,<\/span><\/p>\n

\u00a0\u00a0<\/span>“35.90.247.94”,<\/span><\/p>\n

]<\/span><\/p>\n

.<\/span><\/span><\/p>\n

Results:<\/strong><\/p>\n

VPC successful:<\/p>\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

EC2 successful:<\/p>\n\n\n\n

\n
\"\"<\/a><\/figure>\n<\/figure>\n\n\n\n

Security-Groups:<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n
\"\"<\/a><\/figure>\n\n\n\n

Key Pairs:<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n\n\n\n

Ec2 assigned SG group:<\/p>\n\n\n\n

\"\"<\/a><\/figure>\n","protected":false},"excerpt":{"rendered":"

\u2022\u00a0This will configure a new VPC \u2022\u00a0Create a new subnet for use \u2022\u00a0Create a new security group with bunch rules \u2022\u00a0Create a key pair for your new instances \u2022\u00a0Allow you to scale your instances cleanly use the count attribute. So we are going to do this a bit different than the other post. As the other post is just deployingRead More …<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":true,"template":"","format":"standard","meta":{"footnotes":""},"categories":[140,130],"tags":[],"class_list":["post-1793","post","type-post","status-publish","format-standard","hentry","category-aws","category-terraform"],"_links":{"self":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1793","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/comments?post=1793"}],"version-history":[{"count":19,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1793\/revisions"}],"predecessor-version":[{"id":1837,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/posts\/1793\/revisions\/1837"}],"wp:attachment":[{"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/media?parent=1793"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/categories?post=1793"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nicktailor.com\/tech-blog\/wp-json\/wp\/v2\/tags?post=1793"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}