Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Alibaba Cloud Provider
  3. API Docs
  4. vpn
  5. Connection
Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-alicloud

alicloud.vpn.Connection

Explore with Pulumi AI

alicloud logo
Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
pulumi/pulumi-alicloud

    Example Usage

    Basic Usage

    IPsec-VPN connections support the dual-tunnel mode

    import * as pulumi from "@pulumi/pulumi";
import * as alicloud from "@pulumi/alicloud";

const config = new pulumi.Config();
const name = config.get("name") || "terraform-example";
const spec = config.get("spec") || "5";
const _default = alicloud.vpn.getGatewayZones({
    spec: "5M",
});
const defaultNetwork = new alicloud.vpc.Network("default", {
    cidrBlock: "172.16.0.0/16",
    vpcName: name,
});
const default0 = new alicloud.vpc.Switch("default0", {
    cidrBlock: "172.16.0.0/24",
    vpcId: defaultNetwork.id,
    zoneId: _default.then(_default => _default.ids?.[0]),
});
const default1 = new alicloud.vpc.Switch("default1", {
    cidrBlock: "172.16.1.0/24",
    vpcId: defaultNetwork.id,
    zoneId: _default.then(_default => _default.ids?.[1]),
});
const HA_VPN = new alicloud.vpn.Gateway("HA-VPN", {
    vpnType: "Normal",
    disasterRecoveryVswitchId: default1.id,
    vpnGatewayName: name,
    vswitchId: default0.id,
    autoPay: true,
    vpcId: defaultNetwork.id,
    networkType: "public",
    paymentType: "Subscription",
    enableIpsec: true,
    bandwidth: spec,
});
const defaultCustomerGateway = new alicloud.vpn.CustomerGateway("defaultCustomerGateway", {
    description: "defaultCustomerGateway",
    ipAddress: "2.2.2.5",
    asn: "2224",
    customerGatewayName: name,
});
const changeCustomerGateway = new alicloud.vpn.CustomerGateway("changeCustomerGateway", {
    description: "changeCustomerGateway",
    ipAddress: "2.2.2.6",
    asn: "2225",
    customerGatewayName: name,
});
const defaultConnection = new alicloud.vpn.Connection("default", {
    vpnGatewayId: HA_VPN.id,
    vpnConnectionName: name,
    localSubnets: ["3.0.0.0/24"],
    remoteSubnets: [
        "10.0.0.0/24",
        "10.0.1.0/24",
    ],
    tags: {
        Created: "TF",
        For: "example",
    },
    enableTunnelsBgp: true,
    tunnelOptionsSpecifications: [
        {
            tunnelIpsecConfig: {
                ipsecAuthAlg: "md5",
                ipsecEncAlg: "aes256",
                ipsecLifetime: 16400,
                ipsecPfs: "group5",
            },
            customerGatewayId: defaultCustomerGateway.id,
            role: "master",
            tunnelBgpConfig: {
                localAsn: "1219002",
                tunnelCidr: "169.254.30.0/30",
                localBgpIp: "169.254.30.1",
            },
            tunnelIkeConfig: {
                ikeMode: "aggressive",
                ikeVersion: "ikev2",
                localId: "localid_tunnel2",
                psk: "12345678",
                remoteId: "remote2",
                ikeAuthAlg: "md5",
                ikeEncAlg: "aes256",
                ikeLifetime: 3600,
                ikePfs: "group14",
            },
        },
        {
            tunnelIkeConfig: {
                remoteId: "remote24",
                ikeEncAlg: "aes256",
                ikeLifetime: 27000,
                ikeMode: "aggressive",
                ikePfs: "group5",
                ikeAuthAlg: "md5",
                ikeVersion: "ikev2",
                localId: "localid_tunnel2",
                psk: "12345678",
            },
            tunnelIpsecConfig: {
                ipsecLifetime: 2700,
                ipsecPfs: "group14",
                ipsecAuthAlg: "md5",
                ipsecEncAlg: "aes256",
            },
            customerGatewayId: defaultCustomerGateway.id,
            role: "slave",
            tunnelBgpConfig: {
                localAsn: "1219002",
                localBgpIp: "169.254.40.1",
                tunnelCidr: "169.254.40.0/30",
            },
        },
    ],
});

    import pulumi
import pulumi_alicloud as alicloud

config = pulumi.Config()
name = config.get("name")
if name is None:
    name = "terraform-example"
spec = config.get("spec")
if spec is None:
    spec = "5"
default = alicloud.vpn.get_gateway_zones(spec="5M")
default_network = alicloud.vpc.Network("default",
    cidr_block="172.16.0.0/16",
    vpc_name=name)
default0 = alicloud.vpc.Switch("default0",
    cidr_block="172.16.0.0/24",
    vpc_id=default_network.id,
    zone_id=default.ids[0])
default1 = alicloud.vpc.Switch("default1",
    cidr_block="172.16.1.0/24",
    vpc_id=default_network.id,
    zone_id=default.ids[1])
h_a__vpn = alicloud.vpn.Gateway("HA-VPN",
    vpn_type="Normal",
    disaster_recovery_vswitch_id=default1.id,
    vpn_gateway_name=name,
    vswitch_id=default0.id,
    auto_pay=True,
    vpc_id=default_network.id,
    network_type="public",
    payment_type="Subscription",
    enable_ipsec=True,
    bandwidth=spec)
default_customer_gateway = alicloud.vpn.CustomerGateway("defaultCustomerGateway",
    description="defaultCustomerGateway",
    ip_address="2.2.2.5",
    asn="2224",
    customer_gateway_name=name)
change_customer_gateway = alicloud.vpn.CustomerGateway("changeCustomerGateway",
    description="changeCustomerGateway",
    ip_address="2.2.2.6",
    asn="2225",
    customer_gateway_name=name)
default_connection = alicloud.vpn.Connection("default",
    vpn_gateway_id=h_a__vpn.id,
    vpn_connection_name=name,
    local_subnets=["3.0.0.0/24"],
    remote_subnets=[
        "10.0.0.0/24",
        "10.0.1.0/24",
    ],
    tags={
        "Created": "TF",
        "For": "example",
    },
    enable_tunnels_bgp=True,
    tunnel_options_specifications=[
        {
            "tunnel_ipsec_config": {
                "ipsec_auth_alg": "md5",
                "ipsec_enc_alg": "aes256",
                "ipsec_lifetime": 16400,
                "ipsec_pfs": "group5",
            },
            "customer_gateway_id": default_customer_gateway.id,
            "role": "master",
            "tunnel_bgp_config": {
                "local_asn": "1219002",
                "tunnel_cidr": "169.254.30.0/30",
                "local_bgp_ip": "169.254.30.1",
            },
            "tunnel_ike_config": {
                "ike_mode": "aggressive",
                "ike_version": "ikev2",
                "local_id": "localid_tunnel2",
                "psk": "12345678",
                "remote_id": "remote2",
                "ike_auth_alg": "md5",
                "ike_enc_alg": "aes256",
                "ike_lifetime": 3600,
                "ike_pfs": "group14",
            },
        },
        {
            "tunnel_ike_config": {
                "remote_id": "remote24",
                "ike_enc_alg": "aes256",
                "ike_lifetime": 27000,
                "ike_mode": "aggressive",
                "ike_pfs": "group5",
                "ike_auth_alg": "md5",
                "ike_version": "ikev2",
                "local_id": "localid_tunnel2",
                "psk": "12345678",
            },
            "tunnel_ipsec_config": {
                "ipsec_lifetime": 2700,
                "ipsec_pfs": "group14",
                "ipsec_auth_alg": "md5",
                "ipsec_enc_alg": "aes256",
            },
            "customer_gateway_id": default_customer_gateway.id,
            "role": "slave",
            "tunnel_bgp_config": {
                "local_asn": "1219002",
                "local_bgp_ip": "169.254.40.1",
                "tunnel_cidr": "169.254.40.0/30",
            },
        },
    ])

    package main

import (
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpc"
	"github.com/pulumi/pulumi-alicloud/sdk/v3/go/alicloud/vpn"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi/config"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		cfg := config.New(ctx, "")
		name := "terraform-example"
		if param := cfg.Get("name"); param != "" {
			name = param
		}
		spec := "5"
		if param := cfg.Get("spec"); param != "" {
			spec = param
		}
		_default, err := vpn.GetGatewayZones(ctx, &vpn.GetGatewayZonesArgs{
			Spec: "5M",
		}, nil)
		if err != nil {
			return err
		}
		defaultNetwork, err := vpc.NewNetwork(ctx, "default", &vpc.NetworkArgs{
			CidrBlock: pulumi.String("172.16.0.0/16"),
			VpcName:   pulumi.String(name),
		})
		if err != nil {
			return err
		}
		default0, err := vpc.NewSwitch(ctx, "default0", &vpc.SwitchArgs{
			CidrBlock: pulumi.String("172.16.0.0/24"),
			VpcId:     defaultNetwork.ID(),
			ZoneId:    pulumi.String(_default.Ids[0]),
		})
		if err != nil {
			return err
		}
		default1, err := vpc.NewSwitch(ctx, "default1", &vpc.SwitchArgs{
			CidrBlock: pulumi.String("172.16.1.0/24"),
			VpcId:     defaultNetwork.ID(),
			ZoneId:    pulumi.String(_default.Ids[1]),
		})
		if err != nil {
			return err
		}
		HA_VPN, err := vpn.NewGateway(ctx, "HA-VPN", &vpn.GatewayArgs{
			VpnType:                   pulumi.String("Normal"),
			DisasterRecoveryVswitchId: default1.ID(),
			VpnGatewayName:            pulumi.String(name),
			VswitchId:                 default0.ID(),
			AutoPay:                   pulumi.Bool(true),
			VpcId:                     defaultNetwork.ID(),
			NetworkType:               pulumi.String("public"),
			PaymentType:               pulumi.String("Subscription"),
			EnableIpsec:               pulumi.Bool(true),
			Bandwidth:                 pulumi.String(spec),
		})
		if err != nil {
			return err
		}
		defaultCustomerGateway, err := vpn.NewCustomerGateway(ctx, "defaultCustomerGateway", &vpn.CustomerGatewayArgs{
			Description:         pulumi.String("defaultCustomerGateway"),
			IpAddress:           pulumi.String("2.2.2.5"),
			Asn:                 pulumi.String("2224"),
			CustomerGatewayName: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		_, err = vpn.NewCustomerGateway(ctx, "changeCustomerGateway", &vpn.CustomerGatewayArgs{
			Description:         pulumi.String("changeCustomerGateway"),
			IpAddress:           pulumi.String("2.2.2.6"),
			Asn:                 pulumi.String("2225"),
			CustomerGatewayName: pulumi.String(name),
		})
		if err != nil {
			return err
		}
		_, err = vpn.NewConnection(ctx, "default", &vpn.ConnectionArgs{
			VpnGatewayId:      HA_VPN.ID(),
			VpnConnectionName: pulumi.String(name),
			LocalSubnets: pulumi.StringArray{
				pulumi.String("3.0.0.0/24"),
			},
			RemoteSubnets: pulumi.StringArray{
				pulumi.String("10.0.0.0/24"),
				pulumi.String("10.0.1.0/24"),
			},
			Tags: pulumi.StringMap{
				"Created": pulumi.String("TF"),
				"For":     pulumi.String("example"),
			},
			EnableTunnelsBgp: pulumi.Bool(true),
			TunnelOptionsSpecifications: vpn.ConnectionTunnelOptionsSpecificationArray{
				&vpn.ConnectionTunnelOptionsSpecificationArgs{
					TunnelIpsecConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs{
						IpsecAuthAlg:  pulumi.String("md5"),
						IpsecEncAlg:   pulumi.String("aes256"),
						IpsecLifetime: pulumi.Int(16400),
						IpsecPfs:      pulumi.String("group5"),
					},
					CustomerGatewayId: defaultCustomerGateway.ID(),
					Role:              pulumi.String("master"),
					TunnelBgpConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs{
						LocalAsn:   pulumi.String("1219002"),
						TunnelCidr: pulumi.String("169.254.30.0/30"),
						LocalBgpIp: pulumi.String("169.254.30.1"),
					},
					TunnelIkeConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs{
						IkeMode:     pulumi.String("aggressive"),
						IkeVersion:  pulumi.String("ikev2"),
						LocalId:     pulumi.String("localid_tunnel2"),
						Psk:         pulumi.String("12345678"),
						RemoteId:    pulumi.String("remote2"),
						IkeAuthAlg:  pulumi.String("md5"),
						IkeEncAlg:   pulumi.String("aes256"),
						IkeLifetime: pulumi.Int(3600),
						IkePfs:      pulumi.String("group14"),
					},
				},
				&vpn.ConnectionTunnelOptionsSpecificationArgs{
					TunnelIkeConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs{
						RemoteId:    pulumi.String("remote24"),
						IkeEncAlg:   pulumi.String("aes256"),
						IkeLifetime: pulumi.Int(27000),
						IkeMode:     pulumi.String("aggressive"),
						IkePfs:      pulumi.String("group5"),
						IkeAuthAlg:  pulumi.String("md5"),
						IkeVersion:  pulumi.String("ikev2"),
						LocalId:     pulumi.String("localid_tunnel2"),
						Psk:         pulumi.String("12345678"),
					},
					TunnelIpsecConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs{
						IpsecLifetime: pulumi.Int(2700),
						IpsecPfs:      pulumi.String("group14"),
						IpsecAuthAlg:  pulumi.String("md5"),
						IpsecEncAlg:   pulumi.String("aes256"),
					},
					CustomerGatewayId: defaultCustomerGateway.ID(),
					Role:              pulumi.String("slave"),
					TunnelBgpConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs{
						LocalAsn:   pulumi.String("1219002"),
						LocalBgpIp: pulumi.String("169.254.40.1"),
						TunnelCidr: pulumi.String("169.254.40.0/30"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using AliCloud = Pulumi.AliCloud;

return await Deployment.RunAsync(() => 
{
    var config = new Config();
    var name = config.Get("name") ?? "terraform-example";
    var spec = config.Get("spec") ?? "5";
    var @default = AliCloud.Vpn.GetGatewayZones.Invoke(new()
    {
        Spec = "5M",
    });

    var defaultNetwork = new AliCloud.Vpc.Network("default", new()
    {
        CidrBlock = "172.16.0.0/16",
        VpcName = name,
    });

    var default0 = new AliCloud.Vpc.Switch("default0", new()
    {
        CidrBlock = "172.16.0.0/24",
        VpcId = defaultNetwork.Id,
        ZoneId = @default.Apply(@default => @default.Apply(getGatewayZonesResult => getGatewayZonesResult.Ids[0])),
    });

    var default1 = new AliCloud.Vpc.Switch("default1", new()
    {
        CidrBlock = "172.16.1.0/24",
        VpcId = defaultNetwork.Id,
        ZoneId = @default.Apply(@default => @default.Apply(getGatewayZonesResult => getGatewayZonesResult.Ids[1])),
    });

    var HA_VPN = new AliCloud.Vpn.Gateway("HA-VPN", new()
    {
        VpnType = "Normal",
        DisasterRecoveryVswitchId = default1.Id,
        VpnGatewayName = name,
        VswitchId = default0.Id,
        AutoPay = true,
        VpcId = defaultNetwork.Id,
        NetworkType = "public",
        PaymentType = "Subscription",
        EnableIpsec = true,
        Bandwidth = spec,
    });

    var defaultCustomerGateway = new AliCloud.Vpn.CustomerGateway("defaultCustomerGateway", new()
    {
        Description = "defaultCustomerGateway",
        IpAddress = "2.2.2.5",
        Asn = "2224",
        CustomerGatewayName = name,
    });

    var changeCustomerGateway = new AliCloud.Vpn.CustomerGateway("changeCustomerGateway", new()
    {
        Description = "changeCustomerGateway",
        IpAddress = "2.2.2.6",
        Asn = "2225",
        CustomerGatewayName = name,
    });

    var defaultConnection = new AliCloud.Vpn.Connection("default", new()
    {
        VpnGatewayId = HA_VPN.Id,
        VpnConnectionName = name,
        LocalSubnets = new[]
        {
            "3.0.0.0/24",
        },
        RemoteSubnets = new[]
        {
            "10.0.0.0/24",
            "10.0.1.0/24",
        },
        Tags = 
        {
            { "Created", "TF" },
            { "For", "example" },
        },
        EnableTunnelsBgp = true,
        TunnelOptionsSpecifications = new[]
        {
            new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationArgs
            {
                TunnelIpsecConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs
                {
                    IpsecAuthAlg = "md5",
                    IpsecEncAlg = "aes256",
                    IpsecLifetime = 16400,
                    IpsecPfs = "group5",
                },
                CustomerGatewayId = defaultCustomerGateway.Id,
                Role = "master",
                TunnelBgpConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs
                {
                    LocalAsn = "1219002",
                    TunnelCidr = "169.254.30.0/30",
                    LocalBgpIp = "169.254.30.1",
                },
                TunnelIkeConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs
                {
                    IkeMode = "aggressive",
                    IkeVersion = "ikev2",
                    LocalId = "localid_tunnel2",
                    Psk = "12345678",
                    RemoteId = "remote2",
                    IkeAuthAlg = "md5",
                    IkeEncAlg = "aes256",
                    IkeLifetime = 3600,
                    IkePfs = "group14",
                },
            },
            new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationArgs
            {
                TunnelIkeConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs
                {
                    RemoteId = "remote24",
                    IkeEncAlg = "aes256",
                    IkeLifetime = 27000,
                    IkeMode = "aggressive",
                    IkePfs = "group5",
                    IkeAuthAlg = "md5",
                    IkeVersion = "ikev2",
                    LocalId = "localid_tunnel2",
                    Psk = "12345678",
                },
                TunnelIpsecConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs
                {
                    IpsecLifetime = 2700,
                    IpsecPfs = "group14",
                    IpsecAuthAlg = "md5",
                    IpsecEncAlg = "aes256",
                },
                CustomerGatewayId = defaultCustomerGateway.Id,
                Role = "slave",
                TunnelBgpConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs
                {
                    LocalAsn = "1219002",
                    LocalBgpIp = "169.254.40.1",
                    TunnelCidr = "169.254.40.0/30",
                },
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.alicloud.vpn.VpnFunctions;
import com.pulumi.alicloud.vpn.inputs.GetGatewayZonesArgs;
import com.pulumi.alicloud.vpc.Network;
import com.pulumi.alicloud.vpc.NetworkArgs;
import com.pulumi.alicloud.vpc.Switch;
import com.pulumi.alicloud.vpc.SwitchArgs;
import com.pulumi.alicloud.vpn.Gateway;
import com.pulumi.alicloud.vpn.GatewayArgs;
import com.pulumi.alicloud.vpn.CustomerGateway;
import com.pulumi.alicloud.vpn.CustomerGatewayArgs;
import com.pulumi.alicloud.vpn.Connection;
import com.pulumi.alicloud.vpn.ConnectionArgs;
import com.pulumi.alicloud.vpn.inputs.ConnectionTunnelOptionsSpecificationArgs;
import com.pulumi.alicloud.vpn.inputs.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs;
import com.pulumi.alicloud.vpn.inputs.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs;
import com.pulumi.alicloud.vpn.inputs.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var config = ctx.config();
        final var name = config.get("name").orElse("terraform-example");
        final var spec = config.get("spec").orElse("5");
        final var default = VpnFunctions.getGatewayZones(GetGatewayZonesArgs.builder()
            .spec("5M")
            .build());

        var defaultNetwork = new Network("defaultNetwork", NetworkArgs.builder()
            .cidrBlock("172.16.0.0/16")
            .vpcName(name)
            .build());

        var default0 = new Switch("default0", SwitchArgs.builder()
            .cidrBlock("172.16.0.0/24")
            .vpcId(defaultNetwork.id())
            .zoneId(default_.ids()[0])
            .build());

        var default1 = new Switch("default1", SwitchArgs.builder()
            .cidrBlock("172.16.1.0/24")
            .vpcId(defaultNetwork.id())
            .zoneId(default_.ids()[1])
            .build());

        var hA_VPN = new Gateway("HA-VPN", GatewayArgs.builder()
            .vpnType("Normal")
            .disasterRecoveryVswitchId(default1.id())
            .vpnGatewayName(name)
            .vswitchId(default0.id())
            .autoPay(true)
            .vpcId(defaultNetwork.id())
            .networkType("public")
            .paymentType("Subscription")
            .enableIpsec(true)
            .bandwidth(spec)
            .build());

        var defaultCustomerGateway = new CustomerGateway("defaultCustomerGateway", CustomerGatewayArgs.builder()
            .description("defaultCustomerGateway")
            .ipAddress("2.2.2.5")
            .asn("2224")
            .customerGatewayName(name)
            .build());

        var changeCustomerGateway = new CustomerGateway("changeCustomerGateway", CustomerGatewayArgs.builder()
            .description("changeCustomerGateway")
            .ipAddress("2.2.2.6")
            .asn("2225")
            .customerGatewayName(name)
            .build());

        var defaultConnection = new Connection("defaultConnection", ConnectionArgs.builder()
            .vpnGatewayId(HA_VPN.id())
            .vpnConnectionName(name)
            .localSubnets("3.0.0.0/24")
            .remoteSubnets(            
                "10.0.0.0/24",
                "10.0.1.0/24")
            .tags(Map.ofEntries(
                Map.entry("Created", "TF"),
                Map.entry("For", "example")
            ))
            .enableTunnelsBgp("true")
            .tunnelOptionsSpecifications(            
                ConnectionTunnelOptionsSpecificationArgs.builder()
                    .tunnelIpsecConfig(ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs.builder()
                        .ipsecAuthAlg("md5")
                        .ipsecEncAlg("aes256")
                        .ipsecLifetime("16400")
                        .ipsecPfs("group5")
                        .build())
                    .customerGatewayId(defaultCustomerGateway.id())
                    .role("master")
                    .tunnelBgpConfig(ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs.builder()
                        .localAsn("1219002")
                        .tunnelCidr("169.254.30.0/30")
                        .localBgpIp("169.254.30.1")
                        .build())
                    .tunnelIkeConfig(ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs.builder()
                        .ikeMode("aggressive")
                        .ikeVersion("ikev2")
                        .localId("localid_tunnel2")
                        .psk("12345678")
                        .remoteId("remote2")
                        .ikeAuthAlg("md5")
                        .ikeEncAlg("aes256")
                        .ikeLifetime("3600")
                        .ikePfs("group14")
                        .build())
                    .build(),
                ConnectionTunnelOptionsSpecificationArgs.builder()
                    .tunnelIkeConfig(ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs.builder()
                        .remoteId("remote24")
                        .ikeEncAlg("aes256")
                        .ikeLifetime("27000")
                        .ikeMode("aggressive")
                        .ikePfs("group5")
                        .ikeAuthAlg("md5")
                        .ikeVersion("ikev2")
                        .localId("localid_tunnel2")
                        .psk("12345678")
                        .build())
                    .tunnelIpsecConfig(ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs.builder()
                        .ipsecLifetime("2700")
                        .ipsecPfs("group14")
                        .ipsecAuthAlg("md5")
                        .ipsecEncAlg("aes256")
                        .build())
                    .customerGatewayId(defaultCustomerGateway.id())
                    .role("slave")
                    .tunnelBgpConfig(ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs.builder()
                        .localAsn("1219002")
                        .localBgpIp("169.254.40.1")
                        .tunnelCidr("169.254.40.0/30")
                        .build())
                    .build())
            .build());

    }
}

    configuration:
  name:
    type: string
    default: terraform-example
  spec:
    type: string
    default: '5'
resources:
  defaultNetwork:
    type: alicloud:vpc:Network
    name: default
    properties:
      cidrBlock: 172.16.0.0/16
      vpcName: ${name}
  default0:
    type: alicloud:vpc:Switch
    properties:
      cidrBlock: 172.16.0.0/24
      vpcId: ${defaultNetwork.id}
      zoneId: ${default.ids[0]}
  default1:
    type: alicloud:vpc:Switch
    properties:
      cidrBlock: 172.16.1.0/24
      vpcId: ${defaultNetwork.id}
      zoneId: ${default.ids[1]}
  HA-VPN:
    type: alicloud:vpn:Gateway
    properties:
      vpnType: Normal
      disasterRecoveryVswitchId: ${default1.id}
      vpnGatewayName: ${name}
      vswitchId: ${default0.id}
      autoPay: true
      vpcId: ${defaultNetwork.id}
      networkType: public
      paymentType: Subscription
      enableIpsec: true
      bandwidth: ${spec}
  defaultCustomerGateway:
    type: alicloud:vpn:CustomerGateway
    properties:
      description: defaultCustomerGateway
      ipAddress: 2.2.2.5
      asn: '2224'
      customerGatewayName: ${name}
  changeCustomerGateway:
    type: alicloud:vpn:CustomerGateway
    properties:
      description: changeCustomerGateway
      ipAddress: 2.2.2.6
      asn: '2225'
      customerGatewayName: ${name}
  defaultConnection:
    type: alicloud:vpn:Connection
    name: default
    properties:
      vpnGatewayId: ${["HA-VPN"].id}
      vpnConnectionName: ${name}
      localSubnets:
        - 3.0.0.0/24
      remoteSubnets:
        - 10.0.0.0/24
        - 10.0.1.0/24
      tags:
        Created: TF
        For: example
      enableTunnelsBgp: 'true'
      tunnelOptionsSpecifications:
        - tunnelIpsecConfig:
            ipsecAuthAlg: md5
            ipsecEncAlg: aes256
            ipsecLifetime: '16400'
            ipsecPfs: group5
          customerGatewayId: ${defaultCustomerGateway.id}
          role: master
          tunnelBgpConfig:
            localAsn: '1219002'
            tunnelCidr: 169.254.30.0/30
            localBgpIp: 169.254.30.1
          tunnelIkeConfig:
            ikeMode: aggressive
            ikeVersion: ikev2
            localId: localid_tunnel2
            psk: '12345678'
            remoteId: remote2
            ikeAuthAlg: md5
            ikeEncAlg: aes256
            ikeLifetime: '3600'
            ikePfs: group14
        - tunnelIkeConfig:
            remoteId: remote24
            ikeEncAlg: aes256
            ikeLifetime: '27000'
            ikeMode: aggressive
            ikePfs: group5
            ikeAuthAlg: md5
            ikeVersion: ikev2
            localId: localid_tunnel2
            psk: '12345678'
          tunnelIpsecConfig:
            ipsecLifetime: '2700'
            ipsecPfs: group14
            ipsecAuthAlg: md5
            ipsecEncAlg: aes256
          customerGatewayId: ${defaultCustomerGateway.id}
          role: slave
          tunnelBgpConfig:
            localAsn: '1219002'
            localBgpIp: 169.254.40.1
            tunnelCidr: 169.254.40.0/30
variables:
  default:
    fn::invoke:
      function: alicloud:vpn:getGatewayZones
      arguments:
        spec: 5M

    Create Connection Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Connection(name: string, args: ConnectionArgs, opts?: CustomResourceOptions);
    @overload
def Connection(resource_name: str,
               args: ConnectionArgs,
               opts: Optional[ResourceOptions] = None)

@overload
def Connection(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               local_subnets: Optional[Sequence[str]] = None,
               vpn_gateway_id: Optional[str] = None,
               remote_subnets: Optional[Sequence[str]] = None,
               ike_config: Optional[ConnectionIkeConfigArgs] = None,
               effect_immediately: Optional[bool] = None,
               enable_nat_traversal: Optional[bool] = None,
               enable_tunnels_bgp: Optional[bool] = None,
               health_check_config: Optional[ConnectionHealthCheckConfigArgs] = None,
               auto_config_route: Optional[bool] = None,
               ipsec_config: Optional[ConnectionIpsecConfigArgs] = None,
               enable_dpd: Optional[bool] = None,
               name: Optional[str] = None,
               network_type: Optional[str] = None,
               customer_gateway_id: Optional[str] = None,
               tags: Optional[Mapping[str, str]] = None,
               tunnel_options_specifications: Optional[Sequence[ConnectionTunnelOptionsSpecificationArgs]] = None,
               vpn_connection_name: Optional[str] = None,
               bgp_config: Optional[ConnectionBgpConfigArgs] = None)
    func NewConnection(ctx *Context, name string, args ConnectionArgs, opts ...ResourceOption) (*Connection, error)
    public Connection(string name, ConnectionArgs args, CustomResourceOptions? opts = null)
    public Connection(String name, ConnectionArgs args)
public Connection(String name, ConnectionArgs args, CustomResourceOptions options)

    type: alicloud:vpn:Connection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var exampleconnectionResourceResourceFromVpnconnection = new AliCloud.Vpn.Connection("exampleconnectionResourceResourceFromVpnconnection", new()
{
    LocalSubnets = new[]
    {
        "string",
    },
    VpnGatewayId = "string",
    RemoteSubnets = new[]
    {
        "string",
    },
    IkeConfig = new AliCloud.Vpn.Inputs.ConnectionIkeConfigArgs
    {
        IkeAuthAlg = "string",
        IkeEncAlg = "string",
        IkeLifetime = 0,
        IkeLocalId = "string",
        IkeMode = "string",
        IkePfs = "string",
        IkeRemoteId = "string",
        IkeVersion = "string",
        Psk = "string",
    },
    EffectImmediately = false,
    EnableNatTraversal = false,
    EnableTunnelsBgp = false,
    HealthCheckConfig = new AliCloud.Vpn.Inputs.ConnectionHealthCheckConfigArgs
    {
        Dip = "string",
        Enable = false,
        Interval = 0,
        Retry = 0,
        Sip = "string",
    },
    AutoConfigRoute = false,
    IpsecConfig = new AliCloud.Vpn.Inputs.ConnectionIpsecConfigArgs
    {
        IpsecAuthAlg = "string",
        IpsecEncAlg = "string",
        IpsecLifetime = 0,
        IpsecPfs = "string",
    },
    EnableDpd = false,
    NetworkType = "string",
    CustomerGatewayId = "string",
    Tags = 
    {
        { "string", "string" },
    },
    TunnelOptionsSpecifications = new[]
    {
        new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationArgs
        {
            CustomerGatewayId = "string",
            EnableDpd = false,
            EnableNatTraversal = false,
            InternetIp = "string",
            Role = "string",
            State = "string",
            Status = "string",
            TunnelBgpConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs
            {
                BgpStatus = "string",
                LocalAsn = "string",
                LocalBgpIp = "string",
                PeerAsn = "string",
                PeerBgpIp = "string",
                TunnelCidr = "string",
            },
            TunnelId = "string",
            TunnelIkeConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs
            {
                IkeAuthAlg = "string",
                IkeEncAlg = "string",
                IkeLifetime = 0,
                IkeMode = "string",
                IkePfs = "string",
                IkeVersion = "string",
                LocalId = "string",
                Psk = "string",
                RemoteId = "string",
            },
            TunnelIpsecConfig = new AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs
            {
                IpsecAuthAlg = "string",
                IpsecEncAlg = "string",
                IpsecLifetime = 0,
                IpsecPfs = "string",
            },
            ZoneNo = "string",
        },
    },
    VpnConnectionName = "string",
    BgpConfig = new AliCloud.Vpn.Inputs.ConnectionBgpConfigArgs
    {
        Enable = false,
        LocalAsn = "string",
        LocalBgpIp = "string",
        Status = "string",
        TunnelCidr = "string",
    },
});

    example, err := vpn.NewConnection(ctx, "exampleconnectionResourceResourceFromVpnconnection", &vpn.ConnectionArgs{
	LocalSubnets: pulumi.StringArray{
		pulumi.String("string"),
	},
	VpnGatewayId: pulumi.String("string"),
	RemoteSubnets: pulumi.StringArray{
		pulumi.String("string"),
	},
	IkeConfig: &vpn.ConnectionIkeConfigArgs{
		IkeAuthAlg:  pulumi.String("string"),
		IkeEncAlg:   pulumi.String("string"),
		IkeLifetime: pulumi.Int(0),
		IkeLocalId:  pulumi.String("string"),
		IkeMode:     pulumi.String("string"),
		IkePfs:      pulumi.String("string"),
		IkeRemoteId: pulumi.String("string"),
		IkeVersion:  pulumi.String("string"),
		Psk:         pulumi.String("string"),
	},
	EffectImmediately:  pulumi.Bool(false),
	EnableNatTraversal: pulumi.Bool(false),
	EnableTunnelsBgp:   pulumi.Bool(false),
	HealthCheckConfig: &vpn.ConnectionHealthCheckConfigArgs{
		Dip:      pulumi.String("string"),
		Enable:   pulumi.Bool(false),
		Interval: pulumi.Int(0),
		Retry:    pulumi.Int(0),
		Sip:      pulumi.String("string"),
	},
	AutoConfigRoute: pulumi.Bool(false),
	IpsecConfig: &vpn.ConnectionIpsecConfigArgs{
		IpsecAuthAlg:  pulumi.String("string"),
		IpsecEncAlg:   pulumi.String("string"),
		IpsecLifetime: pulumi.Int(0),
		IpsecPfs:      pulumi.String("string"),
	},
	EnableDpd:         pulumi.Bool(false),
	NetworkType:       pulumi.String("string"),
	CustomerGatewayId: pulumi.String("string"),
	Tags: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	TunnelOptionsSpecifications: vpn.ConnectionTunnelOptionsSpecificationArray{
		&vpn.ConnectionTunnelOptionsSpecificationArgs{
			CustomerGatewayId:  pulumi.String("string"),
			EnableDpd:          pulumi.Bool(false),
			EnableNatTraversal: pulumi.Bool(false),
			InternetIp:         pulumi.String("string"),
			Role:               pulumi.String("string"),
			State:              pulumi.String("string"),
			Status:             pulumi.String("string"),
			TunnelBgpConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs{
				BgpStatus:  pulumi.String("string"),
				LocalAsn:   pulumi.String("string"),
				LocalBgpIp: pulumi.String("string"),
				PeerAsn:    pulumi.String("string"),
				PeerBgpIp:  pulumi.String("string"),
				TunnelCidr: pulumi.String("string"),
			},
			TunnelId: pulumi.String("string"),
			TunnelIkeConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs{
				IkeAuthAlg:  pulumi.String("string"),
				IkeEncAlg:   pulumi.String("string"),
				IkeLifetime: pulumi.Int(0),
				IkeMode:     pulumi.String("string"),
				IkePfs:      pulumi.String("string"),
				IkeVersion:  pulumi.String("string"),
				LocalId:     pulumi.String("string"),
				Psk:         pulumi.String("string"),
				RemoteId:    pulumi.String("string"),
			},
			TunnelIpsecConfig: &vpn.ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs{
				IpsecAuthAlg:  pulumi.String("string"),
				IpsecEncAlg:   pulumi.String("string"),
				IpsecLifetime: pulumi.Int(0),
				IpsecPfs:      pulumi.String("string"),
			},
			ZoneNo: pulumi.String("string"),
		},
	},
	VpnConnectionName: pulumi.String("string"),
	BgpConfig: &vpn.ConnectionBgpConfigArgs{
		Enable:     pulumi.Bool(false),
		LocalAsn:   pulumi.String("string"),
		LocalBgpIp: pulumi.String("string"),
		Status:     pulumi.String("string"),
		TunnelCidr: pulumi.String("string"),
	},
})

    var exampleconnectionResourceResourceFromVpnconnection = new com.pulumi.alicloud.vpn.Connection("exampleconnectionResourceResourceFromVpnconnection", com.pulumi.alicloud.vpn.ConnectionArgs.builder()
    .localSubnets("string")
    .vpnGatewayId("string")
    .remoteSubnets("string")
    .ikeConfig(ConnectionIkeConfigArgs.builder()
        .ikeAuthAlg("string")
        .ikeEncAlg("string")
        .ikeLifetime(0)
        .ikeLocalId("string")
        .ikeMode("string")
        .ikePfs("string")
        .ikeRemoteId("string")
        .ikeVersion("string")
        .psk("string")
        .build())
    .effectImmediately(false)
    .enableNatTraversal(false)
    .enableTunnelsBgp(false)
    .healthCheckConfig(ConnectionHealthCheckConfigArgs.builder()
        .dip("string")
        .enable(false)
        .interval(0)
        .retry(0)
        .sip("string")
        .build())
    .autoConfigRoute(false)
    .ipsecConfig(ConnectionIpsecConfigArgs.builder()
        .ipsecAuthAlg("string")
        .ipsecEncAlg("string")
        .ipsecLifetime(0)
        .ipsecPfs("string")
        .build())
    .enableDpd(false)
    .networkType("string")
    .customerGatewayId("string")
    .tags(Map.of("string", "string"))
    .tunnelOptionsSpecifications(ConnectionTunnelOptionsSpecificationArgs.builder()
        .customerGatewayId("string")
        .enableDpd(false)
        .enableNatTraversal(false)
        .internetIp("string")
        .role("string")
        .state("string")
        .status("string")
        .tunnelBgpConfig(ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs.builder()
            .bgpStatus("string")
            .localAsn("string")
            .localBgpIp("string")
            .peerAsn("string")
            .peerBgpIp("string")
            .tunnelCidr("string")
            .build())
        .tunnelId("string")
        .tunnelIkeConfig(ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs.builder()
            .ikeAuthAlg("string")
            .ikeEncAlg("string")
            .ikeLifetime(0)
            .ikeMode("string")
            .ikePfs("string")
            .ikeVersion("string")
            .localId("string")
            .psk("string")
            .remoteId("string")
            .build())
        .tunnelIpsecConfig(ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs.builder()
            .ipsecAuthAlg("string")
            .ipsecEncAlg("string")
            .ipsecLifetime(0)
            .ipsecPfs("string")
            .build())
        .zoneNo("string")
        .build())
    .vpnConnectionName("string")
    .bgpConfig(ConnectionBgpConfigArgs.builder()
        .enable(false)
        .localAsn("string")
        .localBgpIp("string")
        .status("string")
        .tunnelCidr("string")
        .build())
    .build());

    exampleconnection_resource_resource_from_vpnconnection = alicloud.vpn.Connection("exampleconnectionResourceResourceFromVpnconnection",
    local_subnets=["string"],
    vpn_gateway_id="string",
    remote_subnets=["string"],
    ike_config={
        "ike_auth_alg": "string",
        "ike_enc_alg": "string",
        "ike_lifetime": 0,
        "ike_local_id": "string",
        "ike_mode": "string",
        "ike_pfs": "string",
        "ike_remote_id": "string",
        "ike_version": "string",
        "psk": "string",
    },
    effect_immediately=False,
    enable_nat_traversal=False,
    enable_tunnels_bgp=False,
    health_check_config={
        "dip": "string",
        "enable": False,
        "interval": 0,
        "retry": 0,
        "sip": "string",
    },
    auto_config_route=False,
    ipsec_config={
        "ipsec_auth_alg": "string",
        "ipsec_enc_alg": "string",
        "ipsec_lifetime": 0,
        "ipsec_pfs": "string",
    },
    enable_dpd=False,
    network_type="string",
    customer_gateway_id="string",
    tags={
        "string": "string",
    },
    tunnel_options_specifications=[{
        "customer_gateway_id": "string",
        "enable_dpd": False,
        "enable_nat_traversal": False,
        "internet_ip": "string",
        "role": "string",
        "state": "string",
        "status": "string",
        "tunnel_bgp_config": {
            "bgp_status": "string",
            "local_asn": "string",
            "local_bgp_ip": "string",
            "peer_asn": "string",
            "peer_bgp_ip": "string",
            "tunnel_cidr": "string",
        },
        "tunnel_id": "string",
        "tunnel_ike_config": {
            "ike_auth_alg": "string",
            "ike_enc_alg": "string",
            "ike_lifetime": 0,
            "ike_mode": "string",
            "ike_pfs": "string",
            "ike_version": "string",
            "local_id": "string",
            "psk": "string",
            "remote_id": "string",
        },
        "tunnel_ipsec_config": {
            "ipsec_auth_alg": "string",
            "ipsec_enc_alg": "string",
            "ipsec_lifetime": 0,
            "ipsec_pfs": "string",
        },
        "zone_no": "string",
    }],
    vpn_connection_name="string",
    bgp_config={
        "enable": False,
        "local_asn": "string",
        "local_bgp_ip": "string",
        "status": "string",
        "tunnel_cidr": "string",
    })

    const exampleconnectionResourceResourceFromVpnconnection = new alicloud.vpn.Connection("exampleconnectionResourceResourceFromVpnconnection", {
    localSubnets: ["string"],
    vpnGatewayId: "string",
    remoteSubnets: ["string"],
    ikeConfig: {
        ikeAuthAlg: "string",
        ikeEncAlg: "string",
        ikeLifetime: 0,
        ikeLocalId: "string",
        ikeMode: "string",
        ikePfs: "string",
        ikeRemoteId: "string",
        ikeVersion: "string",
        psk: "string",
    },
    effectImmediately: false,
    enableNatTraversal: false,
    enableTunnelsBgp: false,
    healthCheckConfig: {
        dip: "string",
        enable: false,
        interval: 0,
        retry: 0,
        sip: "string",
    },
    autoConfigRoute: false,
    ipsecConfig: {
        ipsecAuthAlg: "string",
        ipsecEncAlg: "string",
        ipsecLifetime: 0,
        ipsecPfs: "string",
    },
    enableDpd: false,
    networkType: "string",
    customerGatewayId: "string",
    tags: {
        string: "string",
    },
    tunnelOptionsSpecifications: [{
        customerGatewayId: "string",
        enableDpd: false,
        enableNatTraversal: false,
        internetIp: "string",
        role: "string",
        state: "string",
        status: "string",
        tunnelBgpConfig: {
            bgpStatus: "string",
            localAsn: "string",
            localBgpIp: "string",
            peerAsn: "string",
            peerBgpIp: "string",
            tunnelCidr: "string",
        },
        tunnelId: "string",
        tunnelIkeConfig: {
            ikeAuthAlg: "string",
            ikeEncAlg: "string",
            ikeLifetime: 0,
            ikeMode: "string",
            ikePfs: "string",
            ikeVersion: "string",
            localId: "string",
            psk: "string",
            remoteId: "string",
        },
        tunnelIpsecConfig: {
            ipsecAuthAlg: "string",
            ipsecEncAlg: "string",
            ipsecLifetime: 0,
            ipsecPfs: "string",
        },
        zoneNo: "string",
    }],
    vpnConnectionName: "string",
    bgpConfig: {
        enable: false,
        localAsn: "string",
        localBgpIp: "string",
        status: "string",
        tunnelCidr: "string",
    },
});

    type: alicloud:vpn:Connection
properties:
    autoConfigRoute: false
    bgpConfig:
        enable: false
        localAsn: string
        localBgpIp: string
        status: string
        tunnelCidr: string
    customerGatewayId: string
    effectImmediately: false
    enableDpd: false
    enableNatTraversal: false
    enableTunnelsBgp: false
    healthCheckConfig:
        dip: string
        enable: false
        interval: 0
        retry: 0
        sip: string
    ikeConfig:
        ikeAuthAlg: string
        ikeEncAlg: string
        ikeLifetime: 0
        ikeLocalId: string
        ikeMode: string
        ikePfs: string
        ikeRemoteId: string
        ikeVersion: string
        psk: string
    ipsecConfig:
        ipsecAuthAlg: string
        ipsecEncAlg: string
        ipsecLifetime: 0
        ipsecPfs: string
    localSubnets:
        - string
    networkType: string
    remoteSubnets:
        - string
    tags:
        string: string
    tunnelOptionsSpecifications:
        - customerGatewayId: string
          enableDpd: false
          enableNatTraversal: false
          internetIp: string
          role: string
          state: string
          status: string
          tunnelBgpConfig:
            bgpStatus: string
            localAsn: string
            localBgpIp: string
            peerAsn: string
            peerBgpIp: string
            tunnelCidr: string
          tunnelId: string
          tunnelIkeConfig:
            ikeAuthAlg: string
            ikeEncAlg: string
            ikeLifetime: 0
            ikeMode: string
            ikePfs: string
            ikeVersion: string
            localId: string
            psk: string
            remoteId: string
          tunnelIpsecConfig:
            ipsecAuthAlg: string
            ipsecEncAlg: string
            ipsecLifetime: 0
            ipsecPfs: string
          zoneNo: string
    vpnConnectionName: string
    vpnGatewayId: string

    Connection Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Connection resource accepts the following input properties:

    LocalSubnets List<string>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    RemoteSubnets List<string>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    VpnGatewayId string
    The ID of the VPN gateway.
    AutoConfigRoute bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    BgpConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    CustomerGatewayId string
    The ID of the customer gateway.
    EffectImmediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    EnableTunnelsBgp bool
    Enable tunnel bgp.
    HealthCheckConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    IkeConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    IpsecConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    Name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    NetworkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    Tags Dictionary<string, string>
    Tags.
    TunnelOptionsSpecifications List<Pulumi.AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecification>
    The tunnel options of IPsec. See tunnel_options_specification below.
    VpnConnectionName string
    The name of the IPsec-VPN connection.
    LocalSubnets []string
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    RemoteSubnets []string
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    VpnGatewayId string
    The ID of the VPN gateway.
    AutoConfigRoute bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    BgpConfig ConnectionBgpConfigArgs
    vpnBgp configuration. See bgp_config below.
    CustomerGatewayId string
    The ID of the customer gateway.
    EffectImmediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    EnableTunnelsBgp bool
    Enable tunnel bgp.
    HealthCheckConfig ConnectionHealthCheckConfigArgs
    Health Check information. See health_check_config below.
    IkeConfig ConnectionIkeConfigArgs
    The configuration of Phase 1 negotiations. See ike_config below.
    IpsecConfig ConnectionIpsecConfigArgs
    IPsec configuration. See ipsec_config below.
    Name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    NetworkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    Tags map[string]string
    Tags.
    TunnelOptionsSpecifications []ConnectionTunnelOptionsSpecificationArgs
    The tunnel options of IPsec. See tunnel_options_specification below.
    VpnConnectionName string
    The name of the IPsec-VPN connection.
    localSubnets List<String>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    remoteSubnets List<String>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    vpnGatewayId String
    The ID of the VPN gateway.
    autoConfigRoute Boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    customerGatewayId String
    The ID of the customer gateway.
    effectImmediately Boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    enableTunnelsBgp Boolean
    Enable tunnel bgp.
    healthCheckConfig ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    ikeConfig ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    name String
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType String
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    tags Map<String,String>
    Tags.
    tunnelOptionsSpecifications List<ConnectionTunnelOptionsSpecification>
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName String
    The name of the IPsec-VPN connection.
    localSubnets string[]
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    remoteSubnets string[]
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    vpnGatewayId string
    The ID of the VPN gateway.
    autoConfigRoute boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    customerGatewayId string
    The ID of the customer gateway.
    effectImmediately boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd boolean
    Wether enable Dpd detection.
    enableNatTraversal boolean
    enable nat traversal.
    enableTunnelsBgp boolean
    Enable tunnel bgp.
    healthCheckConfig ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    ikeConfig ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    tags {[key: string]: string}
    Tags.
    tunnelOptionsSpecifications ConnectionTunnelOptionsSpecification[]
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName string
    The name of the IPsec-VPN connection.
    local_subnets Sequence[str]
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    remote_subnets Sequence[str]
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    vpn_gateway_id str
    The ID of the VPN gateway.
    auto_config_route bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgp_config ConnectionBgpConfigArgs
    vpnBgp configuration. See bgp_config below.
    customer_gateway_id str
    The ID of the customer gateway.
    effect_immediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enable_dpd bool
    Wether enable Dpd detection.
    enable_nat_traversal bool
    enable nat traversal.
    enable_tunnels_bgp bool
    Enable tunnel bgp.
    health_check_config ConnectionHealthCheckConfigArgs
    Health Check information. See health_check_config below.
    ike_config ConnectionIkeConfigArgs
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsec_config ConnectionIpsecConfigArgs
    IPsec configuration. See ipsec_config below.
    name str
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    network_type str
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    tags Mapping[str, str]
    Tags.
    tunnel_options_specifications Sequence[ConnectionTunnelOptionsSpecificationArgs]
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpn_connection_name str
    The name of the IPsec-VPN connection.
    localSubnets List<String>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    remoteSubnets List<String>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    vpnGatewayId String
    The ID of the VPN gateway.
    autoConfigRoute Boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig Property Map
    vpnBgp configuration. See bgp_config below.
    customerGatewayId String
    The ID of the customer gateway.
    effectImmediately Boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    enableTunnelsBgp Boolean
    Enable tunnel bgp.
    healthCheckConfig Property Map
    Health Check information. See health_check_config below.
    ikeConfig Property Map
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig Property Map
    IPsec configuration. See ipsec_config below.
    name String
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType String
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    tags Map<String>
    Tags.
    tunnelOptionsSpecifications List<Property Map>
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName String
    The name of the IPsec-VPN connection.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Connection resource produces the following output properties:

    CreateTime int
    The time when the IPsec-VPN connection was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceGroupId string
    The ID of the resource group.
    Status string
    The negotiation status of Tunnel.
    CreateTime int
    The time when the IPsec-VPN connection was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceGroupId string
    The ID of the resource group.
    Status string
    The negotiation status of Tunnel.
    createTime Integer
    The time when the IPsec-VPN connection was created.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceGroupId String
    The ID of the resource group.
    status String
    The negotiation status of Tunnel.
    createTime number
    The time when the IPsec-VPN connection was created.
    id string
    The provider-assigned unique ID for this managed resource.
    resourceGroupId string
    The ID of the resource group.
    status string
    The negotiation status of Tunnel.
    create_time int
    The time when the IPsec-VPN connection was created.
    id str
    The provider-assigned unique ID for this managed resource.
    resource_group_id str
    The ID of the resource group.
    status str
    The negotiation status of Tunnel.
    createTime Number
    The time when the IPsec-VPN connection was created.
    id String
    The provider-assigned unique ID for this managed resource.
    resourceGroupId String
    The ID of the resource group.
    status String
    The negotiation status of Tunnel.

    Look up Existing Connection Resource

    Get an existing Connection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ConnectionState, opts?: CustomResourceOptions): Connection
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        auto_config_route: Optional[bool] = None,
        bgp_config: Optional[ConnectionBgpConfigArgs] = None,
        create_time: Optional[int] = None,
        customer_gateway_id: Optional[str] = None,
        effect_immediately: Optional[bool] = None,
        enable_dpd: Optional[bool] = None,
        enable_nat_traversal: Optional[bool] = None,
        enable_tunnels_bgp: Optional[bool] = None,
        health_check_config: Optional[ConnectionHealthCheckConfigArgs] = None,
        ike_config: Optional[ConnectionIkeConfigArgs] = None,
        ipsec_config: Optional[ConnectionIpsecConfigArgs] = None,
        local_subnets: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        network_type: Optional[str] = None,
        remote_subnets: Optional[Sequence[str]] = None,
        resource_group_id: Optional[str] = None,
        status: Optional[str] = None,
        tags: Optional[Mapping[str, str]] = None,
        tunnel_options_specifications: Optional[Sequence[ConnectionTunnelOptionsSpecificationArgs]] = None,
        vpn_connection_name: Optional[str] = None,
        vpn_gateway_id: Optional[str] = None) -> Connection
    func GetConnection(ctx *Context, name string, id IDInput, state *ConnectionState, opts ...ResourceOption) (*Connection, error)
    public static Connection Get(string name, Input<string> id, ConnectionState? state, CustomResourceOptions? opts = null)
    public static Connection get(String name, Output<String> id, ConnectionState state, CustomResourceOptions options)
    resources:  _:    type: alicloud:vpn:Connection    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AutoConfigRoute bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    BgpConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    CreateTime int
    The time when the IPsec-VPN connection was created.
    CustomerGatewayId string
    The ID of the customer gateway.
    EffectImmediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    EnableTunnelsBgp bool
    Enable tunnel bgp.
    HealthCheckConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    IkeConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    IpsecConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    LocalSubnets List<string>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    Name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    NetworkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    RemoteSubnets List<string>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    ResourceGroupId string
    The ID of the resource group.
    Status string
    The negotiation status of Tunnel.
    Tags Dictionary<string, string>
    Tags.
    TunnelOptionsSpecifications List<Pulumi.AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecification>
    The tunnel options of IPsec. See tunnel_options_specification below.
    VpnConnectionName string
    The name of the IPsec-VPN connection.
    VpnGatewayId string
    The ID of the VPN gateway.
    AutoConfigRoute bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    BgpConfig ConnectionBgpConfigArgs
    vpnBgp configuration. See bgp_config below.
    CreateTime int
    The time when the IPsec-VPN connection was created.
    CustomerGatewayId string
    The ID of the customer gateway.
    EffectImmediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    EnableTunnelsBgp bool
    Enable tunnel bgp.
    HealthCheckConfig ConnectionHealthCheckConfigArgs
    Health Check information. See health_check_config below.
    IkeConfig ConnectionIkeConfigArgs
    The configuration of Phase 1 negotiations. See ike_config below.
    IpsecConfig ConnectionIpsecConfigArgs
    IPsec configuration. See ipsec_config below.
    LocalSubnets []string
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    Name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    NetworkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    RemoteSubnets []string
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    ResourceGroupId string
    The ID of the resource group.
    Status string
    The negotiation status of Tunnel.
    Tags map[string]string
    Tags.
    TunnelOptionsSpecifications []ConnectionTunnelOptionsSpecificationArgs
    The tunnel options of IPsec. See tunnel_options_specification below.
    VpnConnectionName string
    The name of the IPsec-VPN connection.
    VpnGatewayId string
    The ID of the VPN gateway.
    autoConfigRoute Boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    createTime Integer
    The time when the IPsec-VPN connection was created.
    customerGatewayId String
    The ID of the customer gateway.
    effectImmediately Boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    enableTunnelsBgp Boolean
    Enable tunnel bgp.
    healthCheckConfig ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    ikeConfig ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    localSubnets List<String>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    name String
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType String
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    remoteSubnets List<String>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    resourceGroupId String
    The ID of the resource group.
    status String
    The negotiation status of Tunnel.
    tags Map<String,String>
    Tags.
    tunnelOptionsSpecifications List<ConnectionTunnelOptionsSpecification>
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName String
    The name of the IPsec-VPN connection.
    vpnGatewayId String
    The ID of the VPN gateway.
    autoConfigRoute boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig ConnectionBgpConfig
    vpnBgp configuration. See bgp_config below.
    createTime number
    The time when the IPsec-VPN connection was created.
    customerGatewayId string
    The ID of the customer gateway.
    effectImmediately boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd boolean
    Wether enable Dpd detection.
    enableNatTraversal boolean
    enable nat traversal.
    enableTunnelsBgp boolean
    Enable tunnel bgp.
    healthCheckConfig ConnectionHealthCheckConfig
    Health Check information. See health_check_config below.
    ikeConfig ConnectionIkeConfig
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig ConnectionIpsecConfig
    IPsec configuration. See ipsec_config below.
    localSubnets string[]
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    name string
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType string
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    remoteSubnets string[]
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    resourceGroupId string
    The ID of the resource group.
    status string
    The negotiation status of Tunnel.
    tags {[key: string]: string}
    Tags.
    tunnelOptionsSpecifications ConnectionTunnelOptionsSpecification[]
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName string
    The name of the IPsec-VPN connection.
    vpnGatewayId string
    The ID of the VPN gateway.
    auto_config_route bool
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgp_config ConnectionBgpConfigArgs
    vpnBgp configuration. See bgp_config below.
    create_time int
    The time when the IPsec-VPN connection was created.
    customer_gateway_id str
    The ID of the customer gateway.
    effect_immediately bool
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enable_dpd bool
    Wether enable Dpd detection.
    enable_nat_traversal bool
    enable nat traversal.
    enable_tunnels_bgp bool
    Enable tunnel bgp.
    health_check_config ConnectionHealthCheckConfigArgs
    Health Check information. See health_check_config below.
    ike_config ConnectionIkeConfigArgs
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsec_config ConnectionIpsecConfigArgs
    IPsec configuration. See ipsec_config below.
    local_subnets Sequence[str]
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    name str
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    network_type str
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    remote_subnets Sequence[str]
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    resource_group_id str
    The ID of the resource group.
    status str
    The negotiation status of Tunnel.
    tags Mapping[str, str]
    Tags.
    tunnel_options_specifications Sequence[ConnectionTunnelOptionsSpecificationArgs]
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpn_connection_name str
    The name of the IPsec-VPN connection.
    vpn_gateway_id str
    The ID of the VPN gateway.
    autoConfigRoute Boolean
    Whether to configure routing automatically. Value:

    • true: Automatically configure routes.
    • false: does not automatically configure routes.
    bgpConfig Property Map
    vpnBgp configuration. See bgp_config below.
    createTime Number
    The time when the IPsec-VPN connection was created.
    customerGatewayId String
    The ID of the customer gateway.
    effectImmediately Boolean
    Indicates whether IPsec-VPN negotiations are initiated immediately. Valid values.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    enableTunnelsBgp Boolean
    Enable tunnel bgp.
    healthCheckConfig Property Map
    Health Check information. See health_check_config below.
    ikeConfig Property Map
    The configuration of Phase 1 negotiations. See ike_config below.
    ipsecConfig Property Map
    IPsec configuration. See ipsec_config below.
    localSubnets List<String>
    The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
    name String
    . Field 'name' has been deprecated from provider version 1.216.0. New field 'vpn_connection_name' instead.

    Deprecated: Field 'name' has been deprecated since provider version 1.216.0. New field 'vpn_connection_name' instead.

    networkType String
    The network type of the IPsec connection. Value:

    • public: public network, indicating that the IPsec connection establishes an encrypted communication channel through the public network.
    • private: private network, indicating that the IPsec connection establishes an encrypted communication channel through the private network.
    remoteSubnets List<String>
    The CIDR block of the local data center. This parameter is used for phase-two negotiation.
    resourceGroupId String
    The ID of the resource group.
    status String
    The negotiation status of Tunnel.
    tags Map<String>
    Tags.
    tunnelOptionsSpecifications List<Property Map>
    The tunnel options of IPsec. See tunnel_options_specification below.
    vpnConnectionName String
    The name of the IPsec-VPN connection.
    vpnGatewayId String
    The ID of the VPN gateway.

    Supporting Types

    ConnectionBgpConfig, ConnectionBgpConfigArgs

    Enable bool
    specifies whether to enable BGP. Valid values: true and false (default).
    LocalAsn string
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    LocalBgpIp string
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    Status string
    The negotiation status of Tunnel.
    TunnelCidr string
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
    Enable bool
    specifies whether to enable BGP. Valid values: true and false (default).
    LocalAsn string
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    LocalBgpIp string
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    Status string
    The negotiation status of Tunnel.
    TunnelCidr string
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
    enable Boolean
    specifies whether to enable BGP. Valid values: true and false (default).
    localAsn String
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    localBgpIp String
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    status String
    The negotiation status of Tunnel.
    tunnelCidr String
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
    enable boolean
    specifies whether to enable BGP. Valid values: true and false (default).
    localAsn string
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    localBgpIp string
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    status string
    The negotiation status of Tunnel.
    tunnelCidr string
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
    enable bool
    specifies whether to enable BGP. Valid values: true and false (default).
    local_asn str
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    local_bgp_ip str
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    status str
    The negotiation status of Tunnel.
    tunnel_cidr str
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
    enable Boolean
    specifies whether to enable BGP. Valid values: true and false (default).
    localAsn String
    the autonomous system number (ASN) on the Alibaba Cloud side. Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.). Each segment is 16 bits in length. Enter the number in each segment in decimal format. For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
    localBgpIp String
    the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
    status String
    The negotiation status of Tunnel.
    tunnelCidr String
    The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.

    ConnectionHealthCheckConfig, ConnectionHealthCheckConfigArgs

    Dip string
    the destination IP address configured for health checks.
    Enable bool
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    Interval int
    the time interval of health check retries. Unit: seconds. Default value: 3.
    Retry int
    the maximum number of health check retries. Default value: 3.
    Sip string
    the source IP address that is used for health checks.
    Dip string
    the destination IP address configured for health checks.
    Enable bool
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    Interval int
    the time interval of health check retries. Unit: seconds. Default value: 3.
    Retry int
    the maximum number of health check retries. Default value: 3.
    Sip string
    the source IP address that is used for health checks.
    dip String
    the destination IP address configured for health checks.
    enable Boolean
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    interval Integer
    the time interval of health check retries. Unit: seconds. Default value: 3.
    retry Integer
    the maximum number of health check retries. Default value: 3.
    sip String
    the source IP address that is used for health checks.
    dip string
    the destination IP address configured for health checks.
    enable boolean
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    interval number
    the time interval of health check retries. Unit: seconds. Default value: 3.
    retry number
    the maximum number of health check retries. Default value: 3.
    sip string
    the source IP address that is used for health checks.
    dip str
    the destination IP address configured for health checks.
    enable bool
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    interval int
    the time interval of health check retries. Unit: seconds. Default value: 3.
    retry int
    the maximum number of health check retries. Default value: 3.
    sip str
    the source IP address that is used for health checks.
    dip String
    the destination IP address configured for health checks.
    enable Boolean
    specifies whether to enable health checks. Valid values: true and false. Default value: false.
    interval Number
    the time interval of health check retries. Unit: seconds. Default value: 3.
    retry Number
    the maximum number of health check retries. Default value: 3.
    sip String
    the source IP address that is used for health checks.

    ConnectionIkeConfig, ConnectionIkeConfigArgs

    IkeAuthAlg string
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    IkeEncAlg string
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    IkeLifetime int
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    IkeLocalId string
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    IkeMode string
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    IkePfs string
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    IkeRemoteId string
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    IkeVersion string
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    Psk string
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
    IkeAuthAlg string
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    IkeEncAlg string
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    IkeLifetime int
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    IkeLocalId string
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    IkeMode string
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    IkePfs string
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    IkeRemoteId string
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    IkeVersion string
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    Psk string
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
    ikeAuthAlg String
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    ikeEncAlg String
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ikeLifetime Integer
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ikeLocalId String
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    ikeMode String
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    ikePfs String
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    ikeRemoteId String
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    ikeVersion String
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    psk String
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
    ikeAuthAlg string
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    ikeEncAlg string
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ikeLifetime number
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ikeLocalId string
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    ikeMode string
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    ikePfs string
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    ikeRemoteId string
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    ikeVersion string
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    psk string
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
    ike_auth_alg str
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    ike_enc_alg str
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ike_lifetime int
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ike_local_id str
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    ike_mode str
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    ike_pfs str
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    ike_remote_id str
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    ike_version str
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    psk str
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
    ikeAuthAlg String
    the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
    ikeEncAlg String
    the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ikeLifetime Number
    the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ikeLocalId String
    the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
    ikeMode String
    the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.

    • main: This mode offers higher security during negotiations.
    • aggressive: This mode supports faster negotiations and a higher success rate.
    ikePfs String
    the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
    ikeRemoteId String
    the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
    ikeVersion String
    the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1. Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
    psk String
    the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.

    ConnectionIpsecConfig, ConnectionIpsecConfigArgs

    IpsecAuthAlg string
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    IpsecEncAlg string
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    IpsecLifetime int
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    IpsecPfs string
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
    IpsecAuthAlg string
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    IpsecEncAlg string
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    IpsecLifetime int
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    IpsecPfs string
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
    ipsecAuthAlg String
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    ipsecEncAlg String
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ipsecLifetime Integer
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ipsecPfs String
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
    ipsecAuthAlg string
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    ipsecEncAlg string
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ipsecLifetime number
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ipsecPfs string
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
    ipsec_auth_alg str
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    ipsec_enc_alg str
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ipsec_lifetime int
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ipsec_pfs str
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
    ipsecAuthAlg String
    the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
    ipsecEncAlg String
    the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
    ipsecLifetime Number
    the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
    ipsecPfs String
    the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.

    ConnectionTunnelOptionsSpecification, ConnectionTunnelOptionsSpecificationArgs

    CustomerGatewayId string
    The ID of the customer gateway in Tunnel.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    InternetIp string
    The local internet IP in Tunnel.
    Role string
    The role of Tunnel.
    State string
    The state of Tunnel.
    Status string
    The negotiation status of Tunnel.
    TunnelBgpConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelBgpConfig
    The bgp config of Tunnel. See tunnel_bgp_config below.
    TunnelId string
    The tunnel ID of IPsec-VPN connection.
    TunnelIkeConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIkeConfig
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    TunnelIpsecConfig Pulumi.AliCloud.Vpn.Inputs.ConnectionTunnelOptionsSpecificationTunnelIpsecConfig
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    ZoneNo string
    The zoneNo of tunnel.
    CustomerGatewayId string
    The ID of the customer gateway in Tunnel.
    EnableDpd bool
    Wether enable Dpd detection.
    EnableNatTraversal bool
    enable nat traversal.
    InternetIp string
    The local internet IP in Tunnel.
    Role string
    The role of Tunnel.
    State string
    The state of Tunnel.
    Status string
    The negotiation status of Tunnel.
    TunnelBgpConfig ConnectionTunnelOptionsSpecificationTunnelBgpConfig
    The bgp config of Tunnel. See tunnel_bgp_config below.
    TunnelId string
    The tunnel ID of IPsec-VPN connection.
    TunnelIkeConfig ConnectionTunnelOptionsSpecificationTunnelIkeConfig
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    TunnelIpsecConfig ConnectionTunnelOptionsSpecificationTunnelIpsecConfig
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    ZoneNo string
    The zoneNo of tunnel.
    customerGatewayId String
    The ID of the customer gateway in Tunnel.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    internetIp String
    The local internet IP in Tunnel.
    role String
    The role of Tunnel.
    state String
    The state of Tunnel.
    status String
    The negotiation status of Tunnel.
    tunnelBgpConfig ConnectionTunnelOptionsSpecificationTunnelBgpConfig
    The bgp config of Tunnel. See tunnel_bgp_config below.
    tunnelId String
    The tunnel ID of IPsec-VPN connection.
    tunnelIkeConfig ConnectionTunnelOptionsSpecificationTunnelIkeConfig
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    tunnelIpsecConfig ConnectionTunnelOptionsSpecificationTunnelIpsecConfig
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    zoneNo String
    The zoneNo of tunnel.
    customerGatewayId string
    The ID of the customer gateway in Tunnel.
    enableDpd boolean
    Wether enable Dpd detection.
    enableNatTraversal boolean
    enable nat traversal.
    internetIp string
    The local internet IP in Tunnel.
    role string
    The role of Tunnel.
    state string
    The state of Tunnel.
    status string
    The negotiation status of Tunnel.
    tunnelBgpConfig ConnectionTunnelOptionsSpecificationTunnelBgpConfig
    The bgp config of Tunnel. See tunnel_bgp_config below.
    tunnelId string
    The tunnel ID of IPsec-VPN connection.
    tunnelIkeConfig ConnectionTunnelOptionsSpecificationTunnelIkeConfig
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    tunnelIpsecConfig ConnectionTunnelOptionsSpecificationTunnelIpsecConfig
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    zoneNo string
    The zoneNo of tunnel.
    customer_gateway_id str
    The ID of the customer gateway in Tunnel.
    enable_dpd bool
    Wether enable Dpd detection.
    enable_nat_traversal bool
    enable nat traversal.
    internet_ip str
    The local internet IP in Tunnel.
    role str
    The role of Tunnel.
    state str
    The state of Tunnel.
    status str
    The negotiation status of Tunnel.
    tunnel_bgp_config ConnectionTunnelOptionsSpecificationTunnelBgpConfig
    The bgp config of Tunnel. See tunnel_bgp_config below.
    tunnel_id str
    The tunnel ID of IPsec-VPN connection.
    tunnel_ike_config ConnectionTunnelOptionsSpecificationTunnelIkeConfig
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    tunnel_ipsec_config ConnectionTunnelOptionsSpecificationTunnelIpsecConfig
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    zone_no str
    The zoneNo of tunnel.
    customerGatewayId String
    The ID of the customer gateway in Tunnel.
    enableDpd Boolean
    Wether enable Dpd detection.
    enableNatTraversal Boolean
    enable nat traversal.
    internetIp String
    The local internet IP in Tunnel.
    role String
    The role of Tunnel.
    state String
    The state of Tunnel.
    status String
    The negotiation status of Tunnel.
    tunnelBgpConfig Property Map
    The bgp config of Tunnel. See tunnel_bgp_config below.
    tunnelId String
    The tunnel ID of IPsec-VPN connection.
    tunnelIkeConfig Property Map
    The configuration of Phase 1 negotiations in Tunnel. See tunnel_ike_config below.
    tunnelIpsecConfig Property Map
    IPsec configuration in Tunnel. See tunnel_ipsec_config below.
    zoneNo String
    The zoneNo of tunnel.

    ConnectionTunnelOptionsSpecificationTunnelBgpConfig, ConnectionTunnelOptionsSpecificationTunnelBgpConfigArgs

    BgpStatus string
    Whether BGP function is turned on.
    LocalAsn string
    LocalBgpIp string
    PeerAsn string
    Peer asn.
    PeerBgpIp string
    Peer bgp ip.
    TunnelCidr string
    BgpStatus string
    Whether BGP function is turned on.
    LocalAsn string
    LocalBgpIp string
    PeerAsn string
    Peer asn.
    PeerBgpIp string
    Peer bgp ip.
    TunnelCidr string
    bgpStatus String
    Whether BGP function is turned on.
    localAsn String
    localBgpIp String
    peerAsn String
    Peer asn.
    peerBgpIp String
    Peer bgp ip.
    tunnelCidr String
    bgpStatus string
    Whether BGP function is turned on.
    localAsn string
    localBgpIp string
    peerAsn string
    Peer asn.
    peerBgpIp string
    Peer bgp ip.
    tunnelCidr string
    bgp_status str
    Whether BGP function is turned on.
    local_asn str
    local_bgp_ip str
    peer_asn str
    Peer asn.
    peer_bgp_ip str
    Peer bgp ip.
    tunnel_cidr str
    bgpStatus String
    Whether BGP function is turned on.
    localAsn String
    localBgpIp String
    peerAsn String
    Peer asn.
    peerBgpIp String
    Peer bgp ip.
    tunnelCidr String

    ConnectionTunnelOptionsSpecificationTunnelIkeConfig, ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs

    IkeAuthAlg string
    IkeEncAlg string
    IkeLifetime int
    IkeMode string
    IkePfs string
    IkeVersion string
    LocalId string
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    Psk string
    RemoteId string
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    IkeAuthAlg string
    IkeEncAlg string
    IkeLifetime int
    IkeMode string
    IkePfs string
    IkeVersion string
    LocalId string
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    Psk string
    RemoteId string
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    ikeAuthAlg String
    ikeEncAlg String
    ikeLifetime Integer
    ikeMode String
    ikePfs String
    ikeVersion String
    localId String
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    psk String
    remoteId String
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    ikeAuthAlg string
    ikeEncAlg string
    ikeLifetime number
    ikeMode string
    ikePfs string
    ikeVersion string
    localId string
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    psk string
    remoteId string
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    ike_auth_alg str
    ike_enc_alg str
    ike_lifetime int
    ike_mode str
    ike_pfs str
    ike_version str
    local_id str
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    psk str
    remote_id str
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    ikeAuthAlg String
    ikeEncAlg String
    ikeLifetime Number
    ikeMode String
    ikePfs String
    ikeVersion String
    localId String
    The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel. LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
    psk String
    remoteId String
    The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel. RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.

    ConnectionTunnelOptionsSpecificationTunnelIpsecConfig, ConnectionTunnelOptionsSpecificationTunnelIpsecConfigArgs

    Import

    VPN connection can be imported using the id, e.g.

    $ pulumi import alicloud:vpn/connection:Connection example <id>

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    Alibaba Cloud pulumi/pulumi-alicloud
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the alicloud Terraform Provider.
    alicloud logo
    Alibaba Cloud v3.76.0 published on Tuesday, Apr 8, 2025 by Pulumi
    pulumi/pulumi-alicloud