1. Packages
  2. Scaleway
  3. API Docs
  4. s2svpn
  5. Connection
Scaleway v1.41.1 published on Monday, Jan 12, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

scaleway.s2svpn.Connection

scaleway logo
Scaleway v1.41.1 published on Monday, Jan 12, 2026 by pulumiverse
Schema (JSON)
pulumiverse/pulumi-scaleway

    Creates and manages Scaleway Site-to-Site VPN Connections. A connection links a Scaleway VPN Gateway to a Customer Gateway and establishes an IPSec tunnel with BGP routing.

    For more information, see the main documentation.

    Example Usage

    Basic Connection

    import * as pulumi from "@pulumi/pulumi";
import * as scaleway from "@pulumiverse/scaleway";

const vpc = new scaleway.network.Vpc("vpc", {name: "my-vpc"});
const pn = new scaleway.network.PrivateNetwork("pn", {
    name: "my-private-network",
    vpcId: vpc.id,
    ipv4Subnet: {
        subnet: "10.0.1.0/24",
    },
});
const gateway = new scaleway.s2svpn.Gateway("gateway", {
    name: "my-vpn-gateway",
    gatewayType: "VGW-S",
    privateNetworkId: pn.id,
});
const customerGw = new scaleway.s2svpn.CustomerGateway("customer_gw", {
    name: "my-customer-gateway",
    ipv4Public: "203.0.113.1",
    asn: 65000,
});
const policy = new scaleway.s2svpn.RoutingPolicy("policy", {
    name: "my-routing-policy",
    prefixFilterIns: ["10.0.2.0/24"],
    prefixFilterOuts: ["10.0.1.0/24"],
});
const main = new scaleway.s2svpn.Connection("main", {
    name: "my-vpn-connection",
    vpnGatewayId: gateway.id,
    customerGatewayId: customerGw.id,
    initiationPolicy: "customer_gateway",
    enableRoutePropagation: true,
    bgpConfigIpv4s: [{
        routingPolicyId: policy.id,
        privateIp: "169.254.0.1/30",
        peerPrivateIp: "169.254.0.2/30",
    }],
    ikev2Ciphers: [{
        encryption: "aes256",
        integrity: "sha256",
        dhGroup: "modp2048",
    }],
    espCiphers: [{
        encryption: "aes256",
        integrity: "sha256",
        dhGroup: "modp2048",
    }],
});

    import pulumi
import pulumiverse_scaleway as scaleway

vpc = scaleway.network.Vpc("vpc", name="my-vpc")
pn = scaleway.network.PrivateNetwork("pn",
    name="my-private-network",
    vpc_id=vpc.id,
    ipv4_subnet={
        "subnet": "10.0.1.0/24",
    })
gateway = scaleway.s2svpn.Gateway("gateway",
    name="my-vpn-gateway",
    gateway_type="VGW-S",
    private_network_id=pn.id)
customer_gw = scaleway.s2svpn.CustomerGateway("customer_gw",
    name="my-customer-gateway",
    ipv4_public="203.0.113.1",
    asn=65000)
policy = scaleway.s2svpn.RoutingPolicy("policy",
    name="my-routing-policy",
    prefix_filter_ins=["10.0.2.0/24"],
    prefix_filter_outs=["10.0.1.0/24"])
main = scaleway.s2svpn.Connection("main",
    name="my-vpn-connection",
    vpn_gateway_id=gateway.id,
    customer_gateway_id=customer_gw.id,
    initiation_policy="customer_gateway",
    enable_route_propagation=True,
    bgp_config_ipv4s=[{
        "routing_policy_id": policy.id,
        "private_ip": "169.254.0.1/30",
        "peer_private_ip": "169.254.0.2/30",
    }],
    ikev2_ciphers=[{
        "encryption": "aes256",
        "integrity": "sha256",
        "dh_group": "modp2048",
    }],
    esp_ciphers=[{
        "encryption": "aes256",
        "integrity": "sha256",
        "dh_group": "modp2048",
    }])

    package main

import (
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/network"
	"github.com/pulumiverse/pulumi-scaleway/sdk/go/scaleway/s2svpn"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		vpc, err := network.NewVpc(ctx, "vpc", &network.VpcArgs{
			Name: pulumi.String("my-vpc"),
		})
		if err != nil {
			return err
		}
		pn, err := network.NewPrivateNetwork(ctx, "pn", &network.PrivateNetworkArgs{
			Name:  pulumi.String("my-private-network"),
			VpcId: vpc.ID(),
			Ipv4Subnet: &network.PrivateNetworkIpv4SubnetArgs{
				Subnet: pulumi.String("10.0.1.0/24"),
			},
		})
		if err != nil {
			return err
		}
		gateway, err := s2svpn.NewGateway(ctx, "gateway", &s2svpn.GatewayArgs{
			Name:             pulumi.String("my-vpn-gateway"),
			GatewayType:      pulumi.String("VGW-S"),
			PrivateNetworkId: pn.ID(),
		})
		if err != nil {
			return err
		}
		customerGw, err := s2svpn.NewCustomerGateway(ctx, "customer_gw", &s2svpn.CustomerGatewayArgs{
			Name:       pulumi.String("my-customer-gateway"),
			Ipv4Public: pulumi.String("203.0.113.1"),
			Asn:        pulumi.Int(65000),
		})
		if err != nil {
			return err
		}
		policy, err := s2svpn.NewRoutingPolicy(ctx, "policy", &s2svpn.RoutingPolicyArgs{
			Name: pulumi.String("my-routing-policy"),
			PrefixFilterIns: pulumi.StringArray{
				pulumi.String("10.0.2.0/24"),
			},
			PrefixFilterOuts: pulumi.StringArray{
				pulumi.String("10.0.1.0/24"),
			},
		})
		if err != nil {
			return err
		}
		_, err = s2svpn.NewConnection(ctx, "main", &s2svpn.ConnectionArgs{
			Name:                   pulumi.String("my-vpn-connection"),
			VpnGatewayId:           gateway.ID(),
			CustomerGatewayId:      customerGw.ID(),
			InitiationPolicy:       pulumi.String("customer_gateway"),
			EnableRoutePropagation: pulumi.Bool(true),
			BgpConfigIpv4s: s2svpn.ConnectionBgpConfigIpv4Array{
				&s2svpn.ConnectionBgpConfigIpv4Args{
					RoutingPolicyId: policy.ID(),
					PrivateIp:       pulumi.String("169.254.0.1/30"),
					PeerPrivateIp:   pulumi.String("169.254.0.2/30"),
				},
			},
			Ikev2Ciphers: s2svpn.ConnectionIkev2CipherArray{
				&s2svpn.ConnectionIkev2CipherArgs{
					Encryption: pulumi.String("aes256"),
					Integrity:  pulumi.String("sha256"),
					DhGroup:    pulumi.String("modp2048"),
				},
			},
			EspCiphers: s2svpn.ConnectionEspCipherArray{
				&s2svpn.ConnectionEspCipherArgs{
					Encryption: pulumi.String("aes256"),
					Integrity:  pulumi.String("sha256"),
					DhGroup:    pulumi.String("modp2048"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Scaleway = Pulumiverse.Scaleway;

return await Deployment.RunAsync(() => 
{
    var vpc = new Scaleway.Network.Vpc("vpc", new()
    {
        Name = "my-vpc",
    });

    var pn = new Scaleway.Network.PrivateNetwork("pn", new()
    {
        Name = "my-private-network",
        VpcId = vpc.Id,
        Ipv4Subnet = new Scaleway.Network.Inputs.PrivateNetworkIpv4SubnetArgs
        {
            Subnet = "10.0.1.0/24",
        },
    });

    var gateway = new Scaleway.S2svpn.Gateway("gateway", new()
    {
        Name = "my-vpn-gateway",
        GatewayType = "VGW-S",
        PrivateNetworkId = pn.Id,
    });

    var customerGw = new Scaleway.S2svpn.CustomerGateway("customer_gw", new()
    {
        Name = "my-customer-gateway",
        Ipv4Public = "203.0.113.1",
        Asn = 65000,
    });

    var policy = new Scaleway.S2svpn.RoutingPolicy("policy", new()
    {
        Name = "my-routing-policy",
        PrefixFilterIns = new[]
        {
            "10.0.2.0/24",
        },
        PrefixFilterOuts = new[]
        {
            "10.0.1.0/24",
        },
    });

    var main = new Scaleway.S2svpn.Connection("main", new()
    {
        Name = "my-vpn-connection",
        VpnGatewayId = gateway.Id,
        CustomerGatewayId = customerGw.Id,
        InitiationPolicy = "customer_gateway",
        EnableRoutePropagation = true,
        BgpConfigIpv4s = new[]
        {
            new Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv4Args
            {
                RoutingPolicyId = policy.Id,
                PrivateIp = "169.254.0.1/30",
                PeerPrivateIp = "169.254.0.2/30",
            },
        },
        Ikev2Ciphers = new[]
        {
            new Scaleway.S2svpn.Inputs.ConnectionIkev2CipherArgs
            {
                Encryption = "aes256",
                Integrity = "sha256",
                DhGroup = "modp2048",
            },
        },
        EspCiphers = new[]
        {
            new Scaleway.S2svpn.Inputs.ConnectionEspCipherArgs
            {
                Encryption = "aes256",
                Integrity = "sha256",
                DhGroup = "modp2048",
            },
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.scaleway.network.Vpc;
import com.pulumi.scaleway.network.VpcArgs;
import com.pulumi.scaleway.network.PrivateNetwork;
import com.pulumi.scaleway.network.PrivateNetworkArgs;
import com.pulumi.scaleway.network.inputs.PrivateNetworkIpv4SubnetArgs;
import com.pulumi.scaleway.s2svpn.Gateway;
import com.pulumi.scaleway.s2svpn.GatewayArgs;
import com.pulumi.scaleway.s2svpn.CustomerGateway;
import com.pulumi.scaleway.s2svpn.CustomerGatewayArgs;
import com.pulumi.scaleway.s2svpn.RoutingPolicy;
import com.pulumi.scaleway.s2svpn.RoutingPolicyArgs;
import com.pulumi.scaleway.s2svpn.Connection;
import com.pulumi.scaleway.s2svpn.ConnectionArgs;
import com.pulumi.scaleway.s2svpn.inputs.ConnectionBgpConfigIpv4Args;
import com.pulumi.scaleway.s2svpn.inputs.ConnectionIkev2CipherArgs;
import com.pulumi.scaleway.s2svpn.inputs.ConnectionEspCipherArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var vpc = new Vpc("vpc", VpcArgs.builder()
            .name("my-vpc")
            .build());

        var pn = new PrivateNetwork("pn", PrivateNetworkArgs.builder()
            .name("my-private-network")
            .vpcId(vpc.id())
            .ipv4Subnet(PrivateNetworkIpv4SubnetArgs.builder()
                .subnet("10.0.1.0/24")
                .build())
            .build());

        var gateway = new Gateway("gateway", GatewayArgs.builder()
            .name("my-vpn-gateway")
            .gatewayType("VGW-S")
            .privateNetworkId(pn.id())
            .build());

        var customerGw = new CustomerGateway("customerGw", CustomerGatewayArgs.builder()
            .name("my-customer-gateway")
            .ipv4Public("203.0.113.1")
            .asn(65000)
            .build());

        var policy = new RoutingPolicy("policy", RoutingPolicyArgs.builder()
            .name("my-routing-policy")
            .prefixFilterIns("10.0.2.0/24")
            .prefixFilterOuts("10.0.1.0/24")
            .build());

        var main = new Connection("main", ConnectionArgs.builder()
            .name("my-vpn-connection")
            .vpnGatewayId(gateway.id())
            .customerGatewayId(customerGw.id())
            .initiationPolicy("customer_gateway")
            .enableRoutePropagation(true)
            .bgpConfigIpv4s(ConnectionBgpConfigIpv4Args.builder()
                .routingPolicyId(policy.id())
                .privateIp("169.254.0.1/30")
                .peerPrivateIp("169.254.0.2/30")
                .build())
            .ikev2Ciphers(ConnectionIkev2CipherArgs.builder()
                .encryption("aes256")
                .integrity("sha256")
                .dhGroup("modp2048")
                .build())
            .espCiphers(ConnectionEspCipherArgs.builder()
                .encryption("aes256")
                .integrity("sha256")
                .dhGroup("modp2048")
                .build())
            .build());

    }
}

    resources:
  vpc:
    type: scaleway:network:Vpc
    properties:
      name: my-vpc
  pn:
    type: scaleway:network:PrivateNetwork
    properties:
      name: my-private-network
      vpcId: ${vpc.id}
      ipv4Subnet:
        subnet: 10.0.1.0/24
  gateway:
    type: scaleway:s2svpn:Gateway
    properties:
      name: my-vpn-gateway
      gatewayType: VGW-S
      privateNetworkId: ${pn.id}
  customerGw:
    type: scaleway:s2svpn:CustomerGateway
    name: customer_gw
    properties:
      name: my-customer-gateway
      ipv4Public: 203.0.113.1
      asn: 65000
  policy:
    type: scaleway:s2svpn:RoutingPolicy
    properties:
      name: my-routing-policy
      prefixFilterIns:
        - 10.0.2.0/24
      prefixFilterOuts:
        - 10.0.1.0/24
  main:
    type: scaleway:s2svpn:Connection
    properties:
      name: my-vpn-connection
      vpnGatewayId: ${gateway.id}
      customerGatewayId: ${customerGw.id}
      initiationPolicy: customer_gateway
      enableRoutePropagation: true
      bgpConfigIpv4s:
        - routingPolicyId: ${policy.id}
          privateIp: 169.254.0.1/30
          peerPrivateIp: 169.254.0.2/30
      ikev2Ciphers:
        - encryption: aes256
          integrity: sha256
          dhGroup: modp2048
      espCiphers:
        - encryption: aes256
          integrity: sha256
          dhGroup: modp2048

    Create Connection Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Connection(name: string, args?: ConnectionArgs, opts?: CustomResourceOptions);
    @overload
def Connection(resource_name: str,
               args: Optional[ConnectionArgs] = None,
               opts: Optional[ResourceOptions] = None)

@overload
def Connection(resource_name: str,
               opts: Optional[ResourceOptions] = None,
               bgp_config_ipv4s: Optional[Sequence[ConnectionBgpConfigIpv4Args]] = None,
               bgp_config_ipv6s: Optional[Sequence[ConnectionBgpConfigIpv6Args]] = None,
               customer_gateway_id: Optional[str] = None,
               enable_route_propagation: Optional[bool] = None,
               esp_ciphers: Optional[Sequence[ConnectionEspCipherArgs]] = None,
               ikev2_ciphers: Optional[Sequence[ConnectionIkev2CipherArgs]] = None,
               initiation_policy: Optional[str] = None,
               is_ipv6: Optional[bool] = None,
               name: Optional[str] = None,
               project_id: Optional[str] = None,
               region: Optional[str] = None,
               tags: Optional[Sequence[str]] = None,
               vpn_gateway_id: Optional[str] = None)
    func NewConnection(ctx *Context, name string, args *ConnectionArgs, opts ...ResourceOption) (*Connection, error)
    public Connection(string name, ConnectionArgs? args = null, CustomResourceOptions? opts = null)
    public Connection(String name, ConnectionArgs args)
public Connection(String name, ConnectionArgs args, CustomResourceOptions options)

    type: scaleway:s2svpn:Connection
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ConnectionArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var connectionResource = new Scaleway.S2svpn.Connection("connectionResource", new()
{
    BgpConfigIpv4s = new[]
    {
        new Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv4Args
        {
            RoutingPolicyId = "string",
            PeerPrivateIp = "string",
            PrivateIp = "string",
        },
    },
    BgpConfigIpv6s = new[]
    {
        new Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv6Args
        {
            RoutingPolicyId = "string",
            PeerPrivateIp = "string",
            PrivateIp = "string",
        },
    },
    CustomerGatewayId = "string",
    EnableRoutePropagation = false,
    EspCiphers = new[]
    {
        new Scaleway.S2svpn.Inputs.ConnectionEspCipherArgs
        {
            Encryption = "string",
            DhGroup = "string",
            Integrity = "string",
        },
    },
    Ikev2Ciphers = new[]
    {
        new Scaleway.S2svpn.Inputs.ConnectionIkev2CipherArgs
        {
            Encryption = "string",
            DhGroup = "string",
            Integrity = "string",
        },
    },
    InitiationPolicy = "string",
    IsIpv6 = false,
    Name = "string",
    ProjectId = "string",
    Region = "string",
    Tags = new[]
    {
        "string",
    },
    VpnGatewayId = "string",
});

    example, err := s2svpn.NewConnection(ctx, "connectionResource", &s2svpn.ConnectionArgs{
	BgpConfigIpv4s: s2svpn.ConnectionBgpConfigIpv4Array{
		&s2svpn.ConnectionBgpConfigIpv4Args{
			RoutingPolicyId: pulumi.String("string"),
			PeerPrivateIp:   pulumi.String("string"),
			PrivateIp:       pulumi.String("string"),
		},
	},
	BgpConfigIpv6s: s2svpn.ConnectionBgpConfigIpv6Array{
		&s2svpn.ConnectionBgpConfigIpv6Args{
			RoutingPolicyId: pulumi.String("string"),
			PeerPrivateIp:   pulumi.String("string"),
			PrivateIp:       pulumi.String("string"),
		},
	},
	CustomerGatewayId:      pulumi.String("string"),
	EnableRoutePropagation: pulumi.Bool(false),
	EspCiphers: s2svpn.ConnectionEspCipherArray{
		&s2svpn.ConnectionEspCipherArgs{
			Encryption: pulumi.String("string"),
			DhGroup:    pulumi.String("string"),
			Integrity:  pulumi.String("string"),
		},
	},
	Ikev2Ciphers: s2svpn.ConnectionIkev2CipherArray{
		&s2svpn.ConnectionIkev2CipherArgs{
			Encryption: pulumi.String("string"),
			DhGroup:    pulumi.String("string"),
			Integrity:  pulumi.String("string"),
		},
	},
	InitiationPolicy: pulumi.String("string"),
	IsIpv6:           pulumi.Bool(false),
	Name:             pulumi.String("string"),
	ProjectId:        pulumi.String("string"),
	Region:           pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
	VpnGatewayId: pulumi.String("string"),
})

    var connectionResource = new Connection("connectionResource", ConnectionArgs.builder()
    .bgpConfigIpv4s(ConnectionBgpConfigIpv4Args.builder()
        .routingPolicyId("string")
        .peerPrivateIp("string")
        .privateIp("string")
        .build())
    .bgpConfigIpv6s(ConnectionBgpConfigIpv6Args.builder()
        .routingPolicyId("string")
        .peerPrivateIp("string")
        .privateIp("string")
        .build())
    .customerGatewayId("string")
    .enableRoutePropagation(false)
    .espCiphers(ConnectionEspCipherArgs.builder()
        .encryption("string")
        .dhGroup("string")
        .integrity("string")
        .build())
    .ikev2Ciphers(ConnectionIkev2CipherArgs.builder()
        .encryption("string")
        .dhGroup("string")
        .integrity("string")
        .build())
    .initiationPolicy("string")
    .isIpv6(false)
    .name("string")
    .projectId("string")
    .region("string")
    .tags("string")
    .vpnGatewayId("string")
    .build());

    connection_resource = scaleway.s2svpn.Connection("connectionResource",
    bgp_config_ipv4s=[{
        "routing_policy_id": "string",
        "peer_private_ip": "string",
        "private_ip": "string",
    }],
    bgp_config_ipv6s=[{
        "routing_policy_id": "string",
        "peer_private_ip": "string",
        "private_ip": "string",
    }],
    customer_gateway_id="string",
    enable_route_propagation=False,
    esp_ciphers=[{
        "encryption": "string",
        "dh_group": "string",
        "integrity": "string",
    }],
    ikev2_ciphers=[{
        "encryption": "string",
        "dh_group": "string",
        "integrity": "string",
    }],
    initiation_policy="string",
    is_ipv6=False,
    name="string",
    project_id="string",
    region="string",
    tags=["string"],
    vpn_gateway_id="string")

    const connectionResource = new scaleway.s2svpn.Connection("connectionResource", {
    bgpConfigIpv4s: [{
        routingPolicyId: "string",
        peerPrivateIp: "string",
        privateIp: "string",
    }],
    bgpConfigIpv6s: [{
        routingPolicyId: "string",
        peerPrivateIp: "string",
        privateIp: "string",
    }],
    customerGatewayId: "string",
    enableRoutePropagation: false,
    espCiphers: [{
        encryption: "string",
        dhGroup: "string",
        integrity: "string",
    }],
    ikev2Ciphers: [{
        encryption: "string",
        dhGroup: "string",
        integrity: "string",
    }],
    initiationPolicy: "string",
    isIpv6: false,
    name: "string",
    projectId: "string",
    region: "string",
    tags: ["string"],
    vpnGatewayId: "string",
});

    type: scaleway:s2svpn:Connection
properties:
    bgpConfigIpv4s:
        - peerPrivateIp: string
          privateIp: string
          routingPolicyId: string
    bgpConfigIpv6s:
        - peerPrivateIp: string
          privateIp: string
          routingPolicyId: string
    customerGatewayId: string
    enableRoutePropagation: false
    espCiphers:
        - dhGroup: string
          encryption: string
          integrity: string
    ikev2Ciphers:
        - dhGroup: string
          encryption: string
          integrity: string
    initiationPolicy: string
    isIpv6: false
    name: string
    projectId: string
    region: string
    tags:
        - string
    vpnGatewayId: string

    Connection Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Connection resource accepts the following input properties:

    BgpConfigIpv4s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv4>
    BGP configuration for IPv4. See BGP Config below.
    BgpConfigIpv6s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv6>
    BGP configuration for IPv6. See BGP Config below.
    CustomerGatewayId string
    The ID of the customer gateway to attach to the connection.
    EnableRoutePropagation bool
    Defines whether route propagation is enabled or not.
    EspCiphers List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionEspCipher>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    Ikev2Ciphers List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionIkev2Cipher>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    InitiationPolicy string
    Defines who initiates the IPSec tunnel.
    IsIpv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    Name string
    The name of the connection.
    ProjectId string
    project_id) The ID of the project the connection is associated with.
    Region string
    region) The region in which the connection should be created.
    Tags List<string>
    The list of tags to apply to the connection.
    VpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    BgpConfigIpv4s []ConnectionBgpConfigIpv4Args
    BGP configuration for IPv4. See BGP Config below.
    BgpConfigIpv6s []ConnectionBgpConfigIpv6Args
    BGP configuration for IPv6. See BGP Config below.
    CustomerGatewayId string
    The ID of the customer gateway to attach to the connection.
    EnableRoutePropagation bool
    Defines whether route propagation is enabled or not.
    EspCiphers []ConnectionEspCipherArgs
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    Ikev2Ciphers []ConnectionIkev2CipherArgs
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    InitiationPolicy string
    Defines who initiates the IPSec tunnel.
    IsIpv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    Name string
    The name of the connection.
    ProjectId string
    project_id) The ID of the project the connection is associated with.
    Region string
    region) The region in which the connection should be created.
    Tags []string
    The list of tags to apply to the connection.
    VpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s List<ConnectionBgpConfigIpv4>
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s List<ConnectionBgpConfigIpv6>
    BGP configuration for IPv6. See BGP Config below.
    customerGatewayId String
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation Boolean
    Defines whether route propagation is enabled or not.
    espCiphers List<ConnectionEspCipher>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers List<ConnectionIkev2Cipher>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy String
    Defines who initiates the IPSec tunnel.
    isIpv6 Boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name String
    The name of the connection.
    projectId String
    project_id) The ID of the project the connection is associated with.
    region String
    region) The region in which the connection should be created.
    tags List<String>
    The list of tags to apply to the connection.
    vpnGatewayId String
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s ConnectionBgpConfigIpv4[]
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s ConnectionBgpConfigIpv6[]
    BGP configuration for IPv6. See BGP Config below.
    customerGatewayId string
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation boolean
    Defines whether route propagation is enabled or not.
    espCiphers ConnectionEspCipher[]
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers ConnectionIkev2Cipher[]
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy string
    Defines who initiates the IPSec tunnel.
    isIpv6 boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name string
    The name of the connection.
    projectId string
    project_id) The ID of the project the connection is associated with.
    region string
    region) The region in which the connection should be created.
    tags string[]
    The list of tags to apply to the connection.
    vpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    bgp_config_ipv4s Sequence[ConnectionBgpConfigIpv4Args]
    BGP configuration for IPv4. See BGP Config below.
    bgp_config_ipv6s Sequence[ConnectionBgpConfigIpv6Args]
    BGP configuration for IPv6. See BGP Config below.
    customer_gateway_id str
    The ID of the customer gateway to attach to the connection.
    enable_route_propagation bool
    Defines whether route propagation is enabled or not.
    esp_ciphers Sequence[ConnectionEspCipherArgs]
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2_ciphers Sequence[ConnectionIkev2CipherArgs]
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiation_policy str
    Defines who initiates the IPSec tunnel.
    is_ipv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name str
    The name of the connection.
    project_id str
    project_id) The ID of the project the connection is associated with.
    region str
    region) The region in which the connection should be created.
    tags Sequence[str]
    The list of tags to apply to the connection.
    vpn_gateway_id str
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s List<Property Map>
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s List<Property Map>
    BGP configuration for IPv6. See BGP Config below.
    customerGatewayId String
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation Boolean
    Defines whether route propagation is enabled or not.
    espCiphers List<Property Map>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers List<Property Map>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy String
    Defines who initiates the IPSec tunnel.
    isIpv6 Boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name String
    The name of the connection.
    projectId String
    project_id) The ID of the project the connection is associated with.
    region String
    region) The region in which the connection should be created.
    tags List<String>
    The list of tags to apply to the connection.
    vpnGatewayId String
    The ID of the VPN gateway to attach to the connection.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Connection resource produces the following output properties:

    BgpSessionIpv4s List<Pulumiverse.Scaleway.S2svpn.Outputs.ConnectionBgpSessionIpv4>
    The BGP IPv4 session information. See BGP Session below.
    BgpSessionIpv6s List<Pulumiverse.Scaleway.S2svpn.Outputs.ConnectionBgpSessionIpv6>
    The BGP IPv6 session information. See BGP Session below.
    BgpStatusIpv4 string
    The status of the BGP IPv4 session.
    BgpStatusIpv6 string
    The status of the BGP IPv6 session.
    CreatedAt string
    The date and time of the creation of the connection (RFC 3339 format).
    Id string
    The provider-assigned unique ID for this managed resource.
    OrganizationId string
    The Organization ID the connection is associated with.
    RoutePropagationEnabled bool
    Whether route propagation is enabled.
    SecretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    SecretVersion int
    The version of the secret containing the PSK.
    Status string
    The status of the connection.
    TunnelStatus string
    The status of the IPSec tunnel.
    UpdatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    BgpSessionIpv4s []ConnectionBgpSessionIpv4
    The BGP IPv4 session information. See BGP Session below.
    BgpSessionIpv6s []ConnectionBgpSessionIpv6
    The BGP IPv6 session information. See BGP Session below.
    BgpStatusIpv4 string
    The status of the BGP IPv4 session.
    BgpStatusIpv6 string
    The status of the BGP IPv6 session.
    CreatedAt string
    The date and time of the creation of the connection (RFC 3339 format).
    Id string
    The provider-assigned unique ID for this managed resource.
    OrganizationId string
    The Organization ID the connection is associated with.
    RoutePropagationEnabled bool
    Whether route propagation is enabled.
    SecretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    SecretVersion int
    The version of the secret containing the PSK.
    Status string
    The status of the connection.
    TunnelStatus string
    The status of the IPSec tunnel.
    UpdatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    bgpSessionIpv4s List<ConnectionBgpSessionIpv4>
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s List<ConnectionBgpSessionIpv6>
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 String
    The status of the BGP IPv4 session.
    bgpStatusIpv6 String
    The status of the BGP IPv6 session.
    createdAt String
    The date and time of the creation of the connection (RFC 3339 format).
    id String
    The provider-assigned unique ID for this managed resource.
    organizationId String
    The Organization ID the connection is associated with.
    routePropagationEnabled Boolean
    Whether route propagation is enabled.
    secretId String
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion Integer
    The version of the secret containing the PSK.
    status String
    The status of the connection.
    tunnelStatus String
    The status of the IPSec tunnel.
    updatedAt String
    The date and time of the last update of the connection (RFC 3339 format).
    bgpSessionIpv4s ConnectionBgpSessionIpv4[]
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s ConnectionBgpSessionIpv6[]
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 string
    The status of the BGP IPv4 session.
    bgpStatusIpv6 string
    The status of the BGP IPv6 session.
    createdAt string
    The date and time of the creation of the connection (RFC 3339 format).
    id string
    The provider-assigned unique ID for this managed resource.
    organizationId string
    The Organization ID the connection is associated with.
    routePropagationEnabled boolean
    Whether route propagation is enabled.
    secretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion number
    The version of the secret containing the PSK.
    status string
    The status of the connection.
    tunnelStatus string
    The status of the IPSec tunnel.
    updatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    bgp_session_ipv4s Sequence[ConnectionBgpSessionIpv4]
    The BGP IPv4 session information. See BGP Session below.
    bgp_session_ipv6s Sequence[ConnectionBgpSessionIpv6]
    The BGP IPv6 session information. See BGP Session below.
    bgp_status_ipv4 str
    The status of the BGP IPv4 session.
    bgp_status_ipv6 str
    The status of the BGP IPv6 session.
    created_at str
    The date and time of the creation of the connection (RFC 3339 format).
    id str
    The provider-assigned unique ID for this managed resource.
    organization_id str
    The Organization ID the connection is associated with.
    route_propagation_enabled bool
    Whether route propagation is enabled.
    secret_id str
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secret_version int
    The version of the secret containing the PSK.
    status str
    The status of the connection.
    tunnel_status str
    The status of the IPSec tunnel.
    updated_at str
    The date and time of the last update of the connection (RFC 3339 format).
    bgpSessionIpv4s List<Property Map>
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s List<Property Map>
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 String
    The status of the BGP IPv4 session.
    bgpStatusIpv6 String
    The status of the BGP IPv6 session.
    createdAt String
    The date and time of the creation of the connection (RFC 3339 format).
    id String
    The provider-assigned unique ID for this managed resource.
    organizationId String
    The Organization ID the connection is associated with.
    routePropagationEnabled Boolean
    Whether route propagation is enabled.
    secretId String
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion Number
    The version of the secret containing the PSK.
    status String
    The status of the connection.
    tunnelStatus String
    The status of the IPSec tunnel.
    updatedAt String
    The date and time of the last update of the connection (RFC 3339 format).

    Look up Existing Connection Resource

    Get an existing Connection resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ConnectionState, opts?: CustomResourceOptions): Connection
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        bgp_config_ipv4s: Optional[Sequence[ConnectionBgpConfigIpv4Args]] = None,
        bgp_config_ipv6s: Optional[Sequence[ConnectionBgpConfigIpv6Args]] = None,
        bgp_session_ipv4s: Optional[Sequence[ConnectionBgpSessionIpv4Args]] = None,
        bgp_session_ipv6s: Optional[Sequence[ConnectionBgpSessionIpv6Args]] = None,
        bgp_status_ipv4: Optional[str] = None,
        bgp_status_ipv6: Optional[str] = None,
        created_at: Optional[str] = None,
        customer_gateway_id: Optional[str] = None,
        enable_route_propagation: Optional[bool] = None,
        esp_ciphers: Optional[Sequence[ConnectionEspCipherArgs]] = None,
        ikev2_ciphers: Optional[Sequence[ConnectionIkev2CipherArgs]] = None,
        initiation_policy: Optional[str] = None,
        is_ipv6: Optional[bool] = None,
        name: Optional[str] = None,
        organization_id: Optional[str] = None,
        project_id: Optional[str] = None,
        region: Optional[str] = None,
        route_propagation_enabled: Optional[bool] = None,
        secret_id: Optional[str] = None,
        secret_version: Optional[int] = None,
        status: Optional[str] = None,
        tags: Optional[Sequence[str]] = None,
        tunnel_status: Optional[str] = None,
        updated_at: Optional[str] = None,
        vpn_gateway_id: Optional[str] = None) -> Connection
    func GetConnection(ctx *Context, name string, id IDInput, state *ConnectionState, opts ...ResourceOption) (*Connection, error)
    public static Connection Get(string name, Input<string> id, ConnectionState? state, CustomResourceOptions? opts = null)
    public static Connection get(String name, Output<String> id, ConnectionState state, CustomResourceOptions options)
    resources:  _:    type: scaleway:s2svpn:Connection    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    BgpConfigIpv4s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv4>
    BGP configuration for IPv4. See BGP Config below.
    BgpConfigIpv6s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpConfigIpv6>
    BGP configuration for IPv6. See BGP Config below.
    BgpSessionIpv4s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpSessionIpv4>
    The BGP IPv4 session information. See BGP Session below.
    BgpSessionIpv6s List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionBgpSessionIpv6>
    The BGP IPv6 session information. See BGP Session below.
    BgpStatusIpv4 string
    The status of the BGP IPv4 session.
    BgpStatusIpv6 string
    The status of the BGP IPv6 session.
    CreatedAt string
    The date and time of the creation of the connection (RFC 3339 format).
    CustomerGatewayId string
    The ID of the customer gateway to attach to the connection.
    EnableRoutePropagation bool
    Defines whether route propagation is enabled or not.
    EspCiphers List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionEspCipher>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    Ikev2Ciphers List<Pulumiverse.Scaleway.S2svpn.Inputs.ConnectionIkev2Cipher>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    InitiationPolicy string
    Defines who initiates the IPSec tunnel.
    IsIpv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    Name string
    The name of the connection.
    OrganizationId string
    The Organization ID the connection is associated with.
    ProjectId string
    project_id) The ID of the project the connection is associated with.
    Region string
    region) The region in which the connection should be created.
    RoutePropagationEnabled bool
    Whether route propagation is enabled.
    SecretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    SecretVersion int
    The version of the secret containing the PSK.
    Status string
    The status of the connection.
    Tags List<string>
    The list of tags to apply to the connection.
    TunnelStatus string
    The status of the IPSec tunnel.
    UpdatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    VpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    BgpConfigIpv4s []ConnectionBgpConfigIpv4Args
    BGP configuration for IPv4. See BGP Config below.
    BgpConfigIpv6s []ConnectionBgpConfigIpv6Args
    BGP configuration for IPv6. See BGP Config below.
    BgpSessionIpv4s []ConnectionBgpSessionIpv4Args
    The BGP IPv4 session information. See BGP Session below.
    BgpSessionIpv6s []ConnectionBgpSessionIpv6Args
    The BGP IPv6 session information. See BGP Session below.
    BgpStatusIpv4 string
    The status of the BGP IPv4 session.
    BgpStatusIpv6 string
    The status of the BGP IPv6 session.
    CreatedAt string
    The date and time of the creation of the connection (RFC 3339 format).
    CustomerGatewayId string
    The ID of the customer gateway to attach to the connection.
    EnableRoutePropagation bool
    Defines whether route propagation is enabled or not.
    EspCiphers []ConnectionEspCipherArgs
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    Ikev2Ciphers []ConnectionIkev2CipherArgs
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    InitiationPolicy string
    Defines who initiates the IPSec tunnel.
    IsIpv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    Name string
    The name of the connection.
    OrganizationId string
    The Organization ID the connection is associated with.
    ProjectId string
    project_id) The ID of the project the connection is associated with.
    Region string
    region) The region in which the connection should be created.
    RoutePropagationEnabled bool
    Whether route propagation is enabled.
    SecretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    SecretVersion int
    The version of the secret containing the PSK.
    Status string
    The status of the connection.
    Tags []string
    The list of tags to apply to the connection.
    TunnelStatus string
    The status of the IPSec tunnel.
    UpdatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    VpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s List<ConnectionBgpConfigIpv4>
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s List<ConnectionBgpConfigIpv6>
    BGP configuration for IPv6. See BGP Config below.
    bgpSessionIpv4s List<ConnectionBgpSessionIpv4>
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s List<ConnectionBgpSessionIpv6>
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 String
    The status of the BGP IPv4 session.
    bgpStatusIpv6 String
    The status of the BGP IPv6 session.
    createdAt String
    The date and time of the creation of the connection (RFC 3339 format).
    customerGatewayId String
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation Boolean
    Defines whether route propagation is enabled or not.
    espCiphers List<ConnectionEspCipher>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers List<ConnectionIkev2Cipher>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy String
    Defines who initiates the IPSec tunnel.
    isIpv6 Boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name String
    The name of the connection.
    organizationId String
    The Organization ID the connection is associated with.
    projectId String
    project_id) The ID of the project the connection is associated with.
    region String
    region) The region in which the connection should be created.
    routePropagationEnabled Boolean
    Whether route propagation is enabled.
    secretId String
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion Integer
    The version of the secret containing the PSK.
    status String
    The status of the connection.
    tags List<String>
    The list of tags to apply to the connection.
    tunnelStatus String
    The status of the IPSec tunnel.
    updatedAt String
    The date and time of the last update of the connection (RFC 3339 format).
    vpnGatewayId String
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s ConnectionBgpConfigIpv4[]
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s ConnectionBgpConfigIpv6[]
    BGP configuration for IPv6. See BGP Config below.
    bgpSessionIpv4s ConnectionBgpSessionIpv4[]
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s ConnectionBgpSessionIpv6[]
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 string
    The status of the BGP IPv4 session.
    bgpStatusIpv6 string
    The status of the BGP IPv6 session.
    createdAt string
    The date and time of the creation of the connection (RFC 3339 format).
    customerGatewayId string
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation boolean
    Defines whether route propagation is enabled or not.
    espCiphers ConnectionEspCipher[]
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers ConnectionIkev2Cipher[]
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy string
    Defines who initiates the IPSec tunnel.
    isIpv6 boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name string
    The name of the connection.
    organizationId string
    The Organization ID the connection is associated with.
    projectId string
    project_id) The ID of the project the connection is associated with.
    region string
    region) The region in which the connection should be created.
    routePropagationEnabled boolean
    Whether route propagation is enabled.
    secretId string
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion number
    The version of the secret containing the PSK.
    status string
    The status of the connection.
    tags string[]
    The list of tags to apply to the connection.
    tunnelStatus string
    The status of the IPSec tunnel.
    updatedAt string
    The date and time of the last update of the connection (RFC 3339 format).
    vpnGatewayId string
    The ID of the VPN gateway to attach to the connection.
    bgp_config_ipv4s Sequence[ConnectionBgpConfigIpv4Args]
    BGP configuration for IPv4. See BGP Config below.
    bgp_config_ipv6s Sequence[ConnectionBgpConfigIpv6Args]
    BGP configuration for IPv6. See BGP Config below.
    bgp_session_ipv4s Sequence[ConnectionBgpSessionIpv4Args]
    The BGP IPv4 session information. See BGP Session below.
    bgp_session_ipv6s Sequence[ConnectionBgpSessionIpv6Args]
    The BGP IPv6 session information. See BGP Session below.
    bgp_status_ipv4 str
    The status of the BGP IPv4 session.
    bgp_status_ipv6 str
    The status of the BGP IPv6 session.
    created_at str
    The date and time of the creation of the connection (RFC 3339 format).
    customer_gateway_id str
    The ID of the customer gateway to attach to the connection.
    enable_route_propagation bool
    Defines whether route propagation is enabled or not.
    esp_ciphers Sequence[ConnectionEspCipherArgs]
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2_ciphers Sequence[ConnectionIkev2CipherArgs]
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiation_policy str
    Defines who initiates the IPSec tunnel.
    is_ipv6 bool
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name str
    The name of the connection.
    organization_id str
    The Organization ID the connection is associated with.
    project_id str
    project_id) The ID of the project the connection is associated with.
    region str
    region) The region in which the connection should be created.
    route_propagation_enabled bool
    Whether route propagation is enabled.
    secret_id str
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secret_version int
    The version of the secret containing the PSK.
    status str
    The status of the connection.
    tags Sequence[str]
    The list of tags to apply to the connection.
    tunnel_status str
    The status of the IPSec tunnel.
    updated_at str
    The date and time of the last update of the connection (RFC 3339 format).
    vpn_gateway_id str
    The ID of the VPN gateway to attach to the connection.
    bgpConfigIpv4s List<Property Map>
    BGP configuration for IPv4. See BGP Config below.
    bgpConfigIpv6s List<Property Map>
    BGP configuration for IPv6. See BGP Config below.
    bgpSessionIpv4s List<Property Map>
    The BGP IPv4 session information. See BGP Session below.
    bgpSessionIpv6s List<Property Map>
    The BGP IPv6 session information. See BGP Session below.
    bgpStatusIpv4 String
    The status of the BGP IPv4 session.
    bgpStatusIpv6 String
    The status of the BGP IPv6 session.
    createdAt String
    The date and time of the creation of the connection (RFC 3339 format).
    customerGatewayId String
    The ID of the customer gateway to attach to the connection.
    enableRoutePropagation Boolean
    Defines whether route propagation is enabled or not.
    espCiphers List<Property Map>
    ESP cipher configuration for Phase 2 (data encryption). See Cipher Config below.
    ikev2Ciphers List<Property Map>
    IKEv2 cipher configuration for Phase 1 (tunnel establishment). See Cipher Config below.
    initiationPolicy String
    Defines who initiates the IPSec tunnel.
    isIpv6 Boolean
    Defines IP version of the IPSec Tunnel. Defaults to false (IPv4).
    name String
    The name of the connection.
    organizationId String
    The Organization ID the connection is associated with.
    projectId String
    project_id) The ID of the project the connection is associated with.
    region String
    region) The region in which the connection should be created.
    routePropagationEnabled Boolean
    Whether route propagation is enabled.
    secretId String
    The ID of the secret containing the pre-shared key (PSK) for the connection.
    secretVersion Number
    The version of the secret containing the PSK.
    status String
    The status of the connection.
    tags List<String>
    The list of tags to apply to the connection.
    tunnelStatus String
    The status of the IPSec tunnel.
    updatedAt String
    The date and time of the last update of the connection (RFC 3339 format).
    vpnGatewayId String
    The ID of the VPN gateway to attach to the connection.

    Supporting Types

    ConnectionBgpConfigIpv4, ConnectionBgpConfigIpv4Args

    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId string
    The routing policy ID used for this BGP session.
    peerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    privateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routing_policy_id str
    The routing policy ID used for this BGP session.
    peer_private_ip str
    The BGP peer IP on customer side (within the tunnel).
    private_ip str
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).

    ConnectionBgpConfigIpv6, ConnectionBgpConfigIpv6Args

    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId string
    The routing policy ID used for this BGP session.
    peerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    privateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routing_policy_id str
    The routing policy ID used for this BGP session.
    peer_private_ip str
    The BGP peer IP on customer side (within the tunnel).
    private_ip str
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).

    ConnectionBgpSessionIpv4, ConnectionBgpSessionIpv4Args

    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    privateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId string
    The routing policy ID used for this BGP session.
    peer_private_ip str
    The BGP peer IP on customer side (within the tunnel).
    private_ip str
    The BGP peer IP on Scaleway side (within the tunnel).
    routing_policy_id str
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.

    ConnectionBgpSessionIpv6, ConnectionBgpSessionIpv6Args

    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    PeerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    PrivateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    RoutingPolicyId string
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.
    peerPrivateIp string
    The BGP peer IP on customer side (within the tunnel).
    privateIp string
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId string
    The routing policy ID used for this BGP session.
    peer_private_ip str
    The BGP peer IP on customer side (within the tunnel).
    private_ip str
    The BGP peer IP on Scaleway side (within the tunnel).
    routing_policy_id str
    The routing policy ID used for this BGP session.
    peerPrivateIp String
    The BGP peer IP on customer side (within the tunnel).
    privateIp String
    The BGP peer IP on Scaleway side (within the tunnel).
    routingPolicyId String
    The routing policy ID used for this BGP session.

    ConnectionEspCipher, ConnectionEspCipherArgs

    Encryption string
    The encryption algorithm
    DhGroup string
    The Diffie-Hellman group
    Integrity string
    The integrity/hash algorithm
    Encryption string
    The encryption algorithm
    DhGroup string
    The Diffie-Hellman group
    Integrity string
    The integrity/hash algorithm
    encryption String
    The encryption algorithm
    dhGroup String
    The Diffie-Hellman group
    integrity String
    The integrity/hash algorithm
    encryption string
    The encryption algorithm
    dhGroup string
    The Diffie-Hellman group
    integrity string
    The integrity/hash algorithm
    encryption str
    The encryption algorithm
    dh_group str
    The Diffie-Hellman group
    integrity str
    The integrity/hash algorithm
    encryption String
    The encryption algorithm
    dhGroup String
    The Diffie-Hellman group
    integrity String
    The integrity/hash algorithm

    ConnectionIkev2Cipher, ConnectionIkev2CipherArgs

    Encryption string
    The encryption algorithm
    DhGroup string
    The Diffie-Hellman group
    Integrity string
    The integrity/hash algorithm
    Encryption string
    The encryption algorithm
    DhGroup string
    The Diffie-Hellman group
    Integrity string
    The integrity/hash algorithm
    encryption String
    The encryption algorithm
    dhGroup String
    The Diffie-Hellman group
    integrity String
    The integrity/hash algorithm
    encryption string
    The encryption algorithm
    dhGroup string
    The Diffie-Hellman group
    integrity string
    The integrity/hash algorithm
    encryption str
    The encryption algorithm
    dh_group str
    The Diffie-Hellman group
    integrity str
    The integrity/hash algorithm
    encryption String
    The encryption algorithm
    dhGroup String
    The Diffie-Hellman group
    integrity String
    The integrity/hash algorithm

    Import

    Connections can be imported using {region}/{id}, e.g.

    bash

    $ pulumi import scaleway:s2svpn/connection:Connection main fr-par/11111111-1111-1111-1111-111111111111

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    scaleway pulumiverse/pulumi-scaleway
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the scaleway Terraform Provider.
    scaleway logo
    Scaleway v1.41.1 published on Monday, Jan 12, 2026 by pulumiverse
    Schema (JSON)
    pulumiverse/pulumi-scaleway
      Meet Neo: Your AI Platform Teammate