Provides a Ddos Coo Domain Resource resource.

For information about Ddos Coo Domain Resource and how to use it, see What is Domain Resource.

-> NOTE: Available since v1.123.0.

Example Usage

Basic Usage

provider "alicloud" {
  region = "cn-hangzhou"
}

variable "name" {
  default = "tf-example"
}
variable "domain" {
  default = "tf-example.alibaba.com"
}

resource "alicloud_ddoscoo_instance" "default" {
  name              = var.name
  bandwidth         = "30"
  base_bandwidth    = "30"
  service_bandwidth = "100"
  port_count        = "50"
  domain_count      = "50"
  period            = "1"
  product_type      = "ddoscoo"
}

resource "alicloud_ddoscoo_domain_resource" "default" {
  domain       = var.domain
  rs_type      = 0
  instance_ids = [alicloud_ddoscoo_instance.default.id]
  real_servers = ["177.167.32.11"]
  https_ext    = "{\"Http2\":1,\"Http2https\":0,\"Https2http\":0}"
  proxy_types {
    proxy_ports = [443]
    proxy_type  = "https"
  }
}

Argument Reference

The following arguments are supported:

• cert - (Optional, Available since v1.231.0) The private key of the certificate that you want to associate. This parameter must be used together with the CertName and Cert parameters.

-> NOTE: If you specify a value for the CertName, Cert, and Key parameters, you do not need to specify a value for the CertId parameter.

• cert_identifier - (Optional, Available since v1.231.0) The name of the certificate.

-> NOTE: You can specify the name of the certificate that you want to associate.

• cert_name - (Optional, Computed, Available since v1.231.0) The public key of the certificate that you want to associate. This parameter must be used together with the CertName and Key parameters.

-> NOTE: If you specify a value for the CertName, Cert, and Key parameters, you do not need to specify a value for the CertId parameter.

• cert_region - (Optional, Available since v1.231.0) The region of the certificate. cn-hangzhou and ap-southeast-1 are supported. The default value is cn-hangzhou.
• domain - (Required, ForceNew) The domain name for which you want to configure the Static Page Caching policy.

-> NOTE: You can call the DescribeDomains operation to query all the domain names that are added to Anti-DDoS Pro or Anti-DDoS Premium.

• https_ext - (Optional, Computed, JsonString) The advanced HTTPS settings. This parameter takes effect only when the value of the ProxyType parameter includes https. The value is a string that consists of a JSON struct. The JSON struct contains the following fields:

  • Http2https: specifies whether to turn on Enforce HTTPS Routing. This field is optional and must be an integer. Valid values: 0 and 1. The value 0 indicates that Enforce HTTPS Routing is turned off. The value 1 indicates that Enforce HTTPS Routing is turned on. The default value is 0.

    If your website supports both HTTP and HTTPS, this feature meets your business requirements. If you enable this feature, all HTTP requests to access the website are redirected to HTTPS requests on the standard port 443.

  • Https2http: specifies whether to turn on Enable HTTP. This field is optional and must be an integer. Valid values: 0 and 1. The value 0 indicates that Enable HTTP is turned off. The value 1 indicates that Enable HTTP is turned on. The default value is 0.

    If your website does not support HTTPS, this feature meets your business requirements If this feature is enabled, all HTTPS requests are redirected to HTTP requests and forwarded to origin servers. This feature can redirect WebSockets requests to WebSocket requests. Requests are redirected over the standard port 80.

  • Http2: specifies whether to turn on Enable HTTP/2. This field is optional. Data type: integer. Valid values: 0 and 1. The value 0 indicates that Enable HTTP/2 is turned off. The value 1 indicates that Enable HTTP/2 is turned on. The default value is 0.

    After you turn on the switch, HTTP/2 is used.

• instance_ids - (Required, Set) InstanceIds

• key - (Optional) The globally unique ID of the certificate. The value is in the "Certificate ID-cn-hangzhou" format. For example, if the ID of the certificate is 123, the value of the CertIdentifier parameter is 123-cn-hangzhou.

-> NOTE: You can specify only one of this parameter and the CertId parameter.

• ocsp_enabled - (Optional, Bool, Available since v1.208.0) Specifies whether to enable the OCSP feature. Valid values:

  • true: Opened
  • false: Not enabled

• proxy_types - (Required, Set) Protocol type and port number information. See proxy_types below.

• real_servers - (Required, Set, Available since v1.231.0) Server address information of the source station.

• rs_type - (Required, Int) The address type of the origin server. Valid values:

  • 0: IP address

  • 1: domain name

    If you deploy proxies, such as a Web Application Firewall (WAF) instance, between the origin server and the Anti-DDoS Pro or Anti-DDoS Premium instance, set the value to 1. If you use the domain name, you must enter the address of the proxy, such as the CNAME of WAF.

proxy_types

The proxy_types supports the following:

• proxy_ports - (Required, Set) The port numbers.

• proxy_type - (Optional) The type of the protocol. Valid values:

  • http
  • https
  • websocket
  • websockets

Attributes Reference

The following attributes are exported:

• id - The ID of the resource supplied above.
• cname - The CNAME address to query.

Timeouts

The timeouts block allows you to specify timeouts for certain actions:

• create - (Defaults to 5 mins) Used when create the Domain Resource.
• delete - (Defaults to 5 mins) Used when delete the Domain Resource.
• update - (Defaults to 5 mins) Used when update the Domain Resource.

Import

Ddos Coo Domain Resource can be imported using the id, e.g.

$ terraform import alicloud_ddoscoo_domain_resource.example <id>