ha-vpn.tf

resource "google_compute_router" "google_compute_router6" {
  depends_on = [
    google_compute_network.vpc_network
  ]
  project = var.project
  name    = "cr-east-${google_compute_network.vpc_network["vpc006"].name}"
  network = google_compute_network.vpc_network["vpc006"].name
  bgp {
    asn            = 64514
    advertise_mode = "DEFAULT"
  }
  region = "us-east1"
}

resource "google_compute_ha_vpn_gateway" "ha_gateway6" {
  depends_on = [
    google_compute_router.google_compute_router6
  ]
  project = var.project
  region  = google_compute_router.google_compute_router6.region
  name    = "vpn-east-${google_compute_network.vpc_network["vpc006"].name}"
  network = google_compute_network.vpc_network["vpc006"].name
}

resource "google_compute_vpn_tunnel" "tunnel09" {
  depends_on = [
    google_compute_router.google_compute_router6,
    google_compute_ha_vpn_gateway.ha_gateway6
  ]
  project                         = var.project
  name                            = "tunnel-09-${google_compute_external_vpn_gateway.external_gateway1.name}"
  peer_external_gateway           = google_compute_external_vpn_gateway.external_gateway1.self_link
  peer_external_gateway_interface = "0"
  router                          = google_compute_router.google_compute_router6.self_link
  shared_secret                   = "Avtx2019!"
  vpn_gateway                     = google_compute_ha_vpn_gateway.ha_gateway6.self_link
  vpn_gateway_interface           = "0"
  region                          = google_compute_router.google_compute_router6.region
}

resource "google_compute_vpn_tunnel" "tunnel10" {
  depends_on = [
    google_compute_router.google_compute_router6,
    google_compute_ha_vpn_gateway.ha_gateway6
  ]
  project                         = var.project
  name                            = "tunnel-10-${google_compute_external_vpn_gateway.external_gateway1.name}"
  peer_external_gateway           = google_compute_external_vpn_gateway.external_gateway1.self_link
  peer_external_gateway_interface = "0"
  router                          = google_compute_router.google_compute_router6.self_link
  shared_secret                   = "Avtx2019!"
  vpn_gateway                     = google_compute_ha_vpn_gateway.ha_gateway6.self_link
  vpn_gateway_interface           = "1"
  region                          = google_compute_router.google_compute_router6.region
}

resource "google_compute_router_interface" "router6_interface1" {
  project    = var.project
  name       = "router6-interface1"
  router     = google_compute_router.google_compute_router6.name
  region     = google_compute_router.google_compute_router6.region
  ip_range   = "169.254.6.1/30"
  vpn_tunnel = google_compute_vpn_tunnel.tunnel09.name
}

resource "google_compute_router_interface" "router6_interface2" {
  project    = var.project
  name       = "router6-interface2"
  router     = google_compute_router.google_compute_router6.name
  region     = google_compute_router.google_compute_router6.region
  ip_range   = "169.254.6.5/30"
  vpn_tunnel = google_compute_vpn_tunnel.tunnel10.name
}

resource "google_compute_router_peer" "router6_peer1" {
  project                   = var.project
  name                      = "router6-peer1"
  router                    = google_compute_router.google_compute_router6.name
  region                    = google_compute_router.google_compute_router6.region
  peer_ip_address           = "169.254.6.2"
  peer_asn                  = var.peer_asn
  advertised_route_priority = var.advertised_route_priority
  interface                 = google_compute_router_interface.router6_interface1.name
}

resource "google_compute_router_peer" "router6_peer2" {
  project                   = var.project
  name                      = "router6-peer2"
  router                    = google_compute_router.google_compute_router6.name
  region                    = google_compute_router.google_compute_router6.region
  peer_ip_address           = "169.254.6.6"
  peer_asn                  = var.peer_asn
  advertised_route_priority = var.advertised_route_priority
  interface                 = google_compute_router_interface.router6_interface2.name
}