awsx.lb.NetworkLoadBalancer
Explore with Pulumi AI
Provides a Network Load Balancer resource with listeners and default target group.
Create NetworkLoadBalancer Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new NetworkLoadBalancer(name: string, args?: NetworkLoadBalancerArgs, opts?: CustomResourceOptions);
@overload
def NetworkLoadBalancer(resource_name: str,
args: Optional[NetworkLoadBalancerArgs] = None,
opts: Optional[ResourceOptions] = None)
@overload
def NetworkLoadBalancer(resource_name: str,
opts: Optional[ResourceOptions] = None,
access_logs: Optional[pulumi_aws.lb.LoadBalancerAccessLogsArgs] = None,
client_keep_alive: Optional[int] = None,
connection_logs: Optional[pulumi_aws.lb.LoadBalancerConnectionLogsArgs] = None,
customer_owned_ipv4_pool: Optional[str] = None,
default_target_group: Optional[TargetGroupArgs] = None,
default_target_group_port: Optional[int] = None,
desync_mitigation_mode: Optional[str] = None,
dns_record_client_routing_policy: Optional[str] = None,
drop_invalid_header_fields: Optional[bool] = None,
enable_cross_zone_load_balancing: Optional[bool] = None,
enable_deletion_protection: Optional[bool] = None,
enable_tls_version_and_cipher_suite_headers: Optional[bool] = None,
enable_waf_fail_open: Optional[bool] = None,
enable_xff_client_port: Optional[bool] = None,
enforce_security_group_inbound_rules_on_private_link_traffic: Optional[str] = None,
idle_timeout: Optional[int] = None,
internal: Optional[bool] = None,
ip_address_type: Optional[str] = None,
listener: Optional[ListenerArgs] = None,
listeners: Optional[Sequence[ListenerArgs]] = None,
name: Optional[str] = None,
name_prefix: Optional[str] = None,
preserve_host_header: Optional[bool] = None,
security_groups: Optional[Sequence[str]] = None,
subnet_ids: Optional[Sequence[str]] = None,
subnet_mappings: Optional[Sequence[pulumi_aws.lb.LoadBalancerSubnetMappingArgs]] = None,
subnets: Optional[Sequence[pulumi_aws.ec2.Subnet]] = None,
tags: Optional[Mapping[str, str]] = None,
xff_header_processing_mode: Optional[str] = None)
func NewNetworkLoadBalancer(ctx *Context, name string, args *NetworkLoadBalancerArgs, opts ...ResourceOption) (*NetworkLoadBalancer, error)
public NetworkLoadBalancer(string name, NetworkLoadBalancerArgs? args = null, CustomResourceOptions? opts = null)
public NetworkLoadBalancer(String name, NetworkLoadBalancerArgs args)
public NetworkLoadBalancer(String name, NetworkLoadBalancerArgs args, CustomResourceOptions options)
type: awsx:lb:NetworkLoadBalancer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
Parameters
- name string
- The unique name of the resource.
- args NetworkLoadBalancerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args NetworkLoadBalancerArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args NetworkLoadBalancerArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args NetworkLoadBalancerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args NetworkLoadBalancerArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
NetworkLoadBalancer Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
The NetworkLoadBalancer resource accepts the following input properties:
- Access
Logs Pulumi.Aws. LB. Inputs. Load Balancer Access Logs Access Logs block. See below.
This type is defined in the AWS Classic package.
- Client
Keep intAlive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- Connection
Logs Pulumi.Aws. LB. Inputs. Load Balancer Connection Logs Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- Customer
Owned stringIpv4Pool - ID of the customer owned ipv4 pool to use for this load balancer.
- Default
Target Pulumi.Group Awsx. Lb. Inputs. Target Group - Options creating a default target group.
- Default
Target intGroup Port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- Desync
Mitigation stringMode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - Dns
Record stringClient Routing Policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - Drop
Invalid boolHeader Fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - Enable
Cross boolZone Load Balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - Enable
Deletion boolProtection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - Enable
Tls boolVersion And Cipher Suite Headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- Enable
Waf boolFail Open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - Enable
Xff boolClient Port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - Enforce
Security stringGroup Inbound Rules On Private Link Traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - Idle
Timeout int - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - Internal bool
- If true, the LB will be internal. Defaults to
false
. - Ip
Address stringType - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - Listener
Pulumi.
Awsx. Lb. Inputs. Listener - A listener to create. Only one of [listener] and [listeners] can be specified.
- Listeners
List<Pulumi.
Awsx. Lb. Inputs. Listener> - List of listeners to create. Only one of [listener] and [listeners] can be specified.
- Name string
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - Name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - Preserve
Host boolHeader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - Security
Groups List<string> - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - Subnet
Ids List<string> - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - Subnet
Mappings List<Pulumi.Aws. LB. Inputs. Load Balancer Subnet Mapping> - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - Subnets
List<Pulumi.
Aws. Ec2. Subnet> - A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- Dictionary<string, string>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - Xff
Header stringProcessing Mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
- Access
Logs LoadBalancer Access Logs Args Access Logs block. See below.
This type is defined in the AWS Classic package.
- Client
Keep intAlive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- Connection
Logs LoadBalancer Connection Logs Args Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- Customer
Owned stringIpv4Pool - ID of the customer owned ipv4 pool to use for this load balancer.
- Default
Target TargetGroup Group Args - Options creating a default target group.
- Default
Target intGroup Port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- Desync
Mitigation stringMode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - Dns
Record stringClient Routing Policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - Drop
Invalid boolHeader Fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - Enable
Cross boolZone Load Balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - Enable
Deletion boolProtection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - Enable
Tls boolVersion And Cipher Suite Headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- Enable
Waf boolFail Open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - Enable
Xff boolClient Port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - Enforce
Security stringGroup Inbound Rules On Private Link Traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - Idle
Timeout int - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - Internal bool
- If true, the LB will be internal. Defaults to
false
. - Ip
Address stringType - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - Listener
Listener
Args - A listener to create. Only one of [listener] and [listeners] can be specified.
- Listeners
[]Listener
Args - List of listeners to create. Only one of [listener] and [listeners] can be specified.
- Name string
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - Name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - Preserve
Host boolHeader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - Security
Groups []string - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - Subnet
Ids []string - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - Subnet
Mappings LoadBalancer Subnet Mapping Args - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - Subnets Subnet
- A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- map[string]string
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - Xff
Header stringProcessing Mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
- access
Logs LoadBalancer Access Logs Access Logs block. See below.
This type is defined in the AWS Classic package.
- client
Keep IntegerAlive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- connection
Logs LoadBalancer Connection Logs Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- customer
Owned StringIpv4Pool - ID of the customer owned ipv4 pool to use for this load balancer.
- default
Target TargetGroup Group - Options creating a default target group.
- default
Target IntegerGroup Port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- desync
Mitigation StringMode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - dns
Record StringClient Routing Policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - drop
Invalid BooleanHeader Fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - enable
Cross BooleanZone Load Balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - enable
Deletion BooleanProtection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - enable
Tls BooleanVersion And Cipher Suite Headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- enable
Waf BooleanFail Open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - enable
Xff BooleanClient Port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - enforce
Security StringGroup Inbound Rules On Private Link Traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - idle
Timeout Integer - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - internal Boolean
- If true, the LB will be internal. Defaults to
false
. - ip
Address StringType - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - listener Listener
- A listener to create. Only one of [listener] and [listeners] can be specified.
- listeners List<Listener>
- List of listeners to create. Only one of [listener] and [listeners] can be specified.
- name String
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - name
Prefix String - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - preserve
Host BooleanHeader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - security
Groups List<String> - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - subnet
Ids List<String> - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - subnet
Mappings List<LoadBalancer Subnet Mapping> - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - subnets List<Subnet>
- A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- Map<String,String>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - xff
Header StringProcessing Mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
- access
Logs pulumiAws.types.input. Load Balancer Access Logs Access Logs block. See below.
This type is defined in the AWS Classic package.
- client
Keep numberAlive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- connection
Logs pulumiAws.types.input. Load Balancer Connection Logs Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- customer
Owned stringIpv4Pool - ID of the customer owned ipv4 pool to use for this load balancer.
- default
Target TargetGroup Group - Options creating a default target group.
- default
Target numberGroup Port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- desync
Mitigation stringMode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - dns
Record stringClient Routing Policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - drop
Invalid booleanHeader Fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - enable
Cross booleanZone Load Balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - enable
Deletion booleanProtection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - enable
Tls booleanVersion And Cipher Suite Headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- enable
Waf booleanFail Open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - enable
Xff booleanClient Port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - enforce
Security stringGroup Inbound Rules On Private Link Traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - idle
Timeout number - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - internal boolean
- If true, the LB will be internal. Defaults to
false
. - ip
Address stringType - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - listener Listener
- A listener to create. Only one of [listener] and [listeners] can be specified.
- listeners Listener[]
- List of listeners to create. Only one of [listener] and [listeners] can be specified.
- name string
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - preserve
Host booleanHeader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - security
Groups string[] - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - subnet
Ids string[] - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - subnet
Mappings pulumiAws.types.input. Load Balancer Subnet Mapping[] - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - subnets
pulumi
Aws.ec2. Subnet[] - A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- {[key: string]: string}
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - xff
Header stringProcessing Mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
- access_
logs pulumi_aws.lb. Load Balancer Access Logs Args Access Logs block. See below.
This type is defined in the AWS Classic package.
- client_
keep_ intalive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- connection_
logs pulumi_aws.lb. Load Balancer Connection Logs Args Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- customer_
owned_ stripv4_ pool - ID of the customer owned ipv4 pool to use for this load balancer.
- default_
target_ Targetgroup Group Args - Options creating a default target group.
- default_
target_ intgroup_ port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- desync_
mitigation_ strmode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - dns_
record_ strclient_ routing_ policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - drop_
invalid_ boolheader_ fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - enable_
cross_ boolzone_ load_ balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - enable_
deletion_ boolprotection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - enable_
tls_ boolversion_ and_ cipher_ suite_ headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- enable_
waf_ boolfail_ open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - enable_
xff_ boolclient_ port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - enforce_
security_ strgroup_ inbound_ rules_ on_ private_ link_ traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - idle_
timeout int - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - internal bool
- If true, the LB will be internal. Defaults to
false
. - ip_
address_ strtype - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - listener
Listener
Args - A listener to create. Only one of [listener] and [listeners] can be specified.
- listeners
Sequence[Listener
Args] - List of listeners to create. Only one of [listener] and [listeners] can be specified.
- name str
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - name_
prefix str - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - preserve_
host_ boolheader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - security_
groups Sequence[str] - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - subnet_
ids Sequence[str] - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - subnet_
mappings Sequence[pulumi_aws.lb. Load Balancer Subnet Mapping Args] - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - subnets
Sequence[pulumi_
aws.ec2. Subnet] - A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- Mapping[str, str]
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - xff_
header_ strprocessing_ mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
- access
Logs Property Map Access Logs block. See below.
This type is defined in the AWS Classic package.
- client
Keep NumberAlive - Client keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds.
- connection
Logs Property Map Connection Logs block. See below. Only valid for Load Balancers of type
application
.This type is defined in the AWS Classic package.
- customer
Owned StringIpv4Pool - ID of the customer owned ipv4 pool to use for this load balancer.
- default
Target Property MapGroup - Options creating a default target group.
- default
Target NumberGroup Port - Port to use to connect with the target. Valid values are ports 1-65535. Defaults to 80.
- desync
Mitigation StringMode - How the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are
monitor
,defensive
(default),strictest
. - dns
Record StringClient Routing Policy - How traffic is distributed among the load balancer Availability Zones. Possible values are
any_availability_zone
(default),availability_zone_affinity
, orpartial_availability_zone_affinity
. See Availability Zone DNS affinity for additional details. Only valid fornetwork
type load balancers. - drop
Invalid BooleanHeader Fields - Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type
application
. - enable
Cross BooleanZone Load Balancing - If true, cross-zone load balancing of the load balancer will be enabled. For
network
andgateway
type load balancers, this feature is disabled by default (false
). Forapplication
load balancer this feature is always enabled (true
) and cannot be disabled. Defaults tofalse
. - enable
Deletion BooleanProtection - If true, deletion of the load balancer will be disabled via the AWS API. This will prevent this provider from deleting the load balancer. Defaults to
false
. - enable
Tls BooleanVersion And Cipher Suite Headers - Whether the two headers (
x-amzn-tls-version
andx-amzn-tls-cipher-suite
), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of typeapplication
. Defaults tofalse
- enable
Waf BooleanFail Open - Whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to
false
. - enable
Xff BooleanClient Port - Whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in
application
load balancers. Defaults tofalse
. - enforce
Security StringGroup Inbound Rules On Private Link Traffic - Whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type
network
. The possible values areon
andoff
. - idle
Timeout Number - Time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type
application
. Default: 60. - internal Boolean
- If true, the LB will be internal. Defaults to
false
. - ip
Address StringType - Type of IP addresses used by the subnets for your load balancer. The possible values are
ipv4
anddualstack
. - listener Property Map
- A listener to create. Only one of [listener] and [listeners] can be specified.
- listeners List<Property Map>
- List of listeners to create. Only one of [listener] and [listeners] can be specified.
- name String
- Name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen. If not specified, this provider will autogenerate a name beginning with
tf-lb
. - name
Prefix String - Creates a unique name beginning with the specified prefix. Conflicts with
name
. - preserve
Host BooleanHeader - Whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to
false
. - security
Groups List<String> - List of security group IDs to assign to the LB. Only valid for Load Balancers of type
application
ornetwork
. For load balancers of typenetwork
security groups cannot be added if none are currently present, and cannot all be removed once added. If either of these conditions are met, this will force a recreation of the resource. - subnet
Ids List<String> - List of subnet IDs to attach to the LB. For Load Balancers of type
network
subnets can only be added (see Availability Zones), deleting a subnet for load balancers of typenetwork
will force a recreation of the resource. - subnet
Mappings List<Property Map> - Subnet mapping block. See below. For Load Balancers of type
network
subnet mappings can only be added. - subnets List<aws:ec2:Subnet>
- A list of subnets to attach to the LB. Only one of [subnets], [subnetIds] or [subnetMappings] can be specified
- Map<String>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - xff
Header StringProcessing Mode - Determines how the load balancer modifies the
X-Forwarded-For
header in the HTTP request before sending the request to the target. The possible values areappend
,preserve
, andremove
. Only valid for Load Balancers of typeapplication
. The default isappend
.
Outputs
All input properties are implicitly available as output properties. Additionally, the NetworkLoadBalancer resource produces the following output properties:
- Load
Balancer Pulumi.Aws. LB. Load Balancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- Vpc
Id string - Id of the VPC in which this load balancer is operating
- Load
Balancer LoadBalancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- Vpc
Id string - Id of the VPC in which this load balancer is operating
- load
Balancer LoadBalancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- vpc
Id String - Id of the VPC in which this load balancer is operating
- load
Balancer pulumiAws. Load Balancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- vpc
Id string - Id of the VPC in which this load balancer is operating
- load_
balancer pulumi_aws.lb. Load Balancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- vpc_
id str - Id of the VPC in which this load balancer is operating
- load
Balancer aws::LoadBalancer - Underlying Load Balancer resource This type is defined in the AWS Classic package.
- vpc
Id String - Id of the VPC in which this load balancer is operating
Supporting Types
Listener, ListenerArgs
- Alpn
Policy string - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - Certificate
Arn string - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - Default
Actions List<Pulumi.Aws. LB. Inputs. Listener Default Action> - Configuration block for default actions. Detailed below.
- Mutual
Authentication Pulumi.Aws. LB. Inputs. Listener Mutual Authentication The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- Port int
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- Protocol string
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - Ssl
Policy string - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - Dictionary<string, string>
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
- Alpn
Policy string - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - Certificate
Arn string - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - Default
Actions ListenerDefault Action - Configuration block for default actions. Detailed below.
- Mutual
Authentication ListenerMutual Authentication The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- Port int
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- Protocol string
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - Ssl
Policy string - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - map[string]string
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
- alpn
Policy String - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - certificate
Arn String - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - default
Actions List<ListenerDefault Action> - Configuration block for default actions. Detailed below.
- mutual
Authentication ListenerMutual Authentication The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- port Integer
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- protocol String
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - ssl
Policy String - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - Map<String,String>
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
- alpn
Policy string - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - certificate
Arn string - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - default
Actions pulumiAws.types.input. Listener Default Action[] - Configuration block for default actions. Detailed below.
- mutual
Authentication pulumiAws.types.input. Listener Mutual Authentication The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- port number
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- protocol string
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - ssl
Policy string - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - {[key: string]: string}
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
- alpn_
policy str - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - certificate_
arn str - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - default_
actions Sequence[pulumi_aws.lb. Listener Default Action Args] - Configuration block for default actions. Detailed below.
- mutual_
authentication pulumi_aws.lb. Listener Mutual Authentication Args The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- port int
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- protocol str
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - ssl_
policy str - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - Mapping[str, str]
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
- alpn
Policy String - Name of the Application-Layer Protocol Negotiation (ALPN) policy. Can be set if
protocol
isTLS
. Valid values areHTTP1Only
,HTTP2Only
,HTTP2Optional
,HTTP2Preferred
, andNone
. - certificate
Arn String - ARN of the default SSL server certificate. Exactly one certificate is required if the protocol is HTTPS. For adding additional SSL certificates, see the
aws.lb.ListenerCertificate
resource. - default
Actions List<Property Map> - Configuration block for default actions. Detailed below.
- mutual
Authentication Property Map The mutual authentication configuration information. Detailed below.
This type is defined in the AWS Classic package.
- port Number
- Port on which the load balancer is listening. Not valid for Gateway Load Balancers.
- protocol String
- Protocol for connections from clients to the load balancer. For Application Load Balancers, valid values are
HTTP
andHTTPS
, with a default ofHTTP
. For Network Load Balancers, valid values areTCP
,TLS
,UDP
, andTCP_UDP
. Not valid to useUDP
orTCP_UDP
if dual-stack mode is enabled. Not valid for Gateway Load Balancers. - ssl
Policy String - Name of the SSL Policy for the listener. Required if
protocol
isHTTPS
orTLS
. - Map<String>
A map of tags to assign to the resource. .If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level.NOTE:: Please note that listeners that are attached to Application Load Balancers must use either
HTTP
orHTTPS
protocols while listeners that are attached to Network Load Balancers must use theTCP
protocol.
TargetGroup, TargetGroupArgs
- Connection
Termination bool - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - Deregistration
Delay int - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- Health
Check Pulumi.Aws. LB. Inputs. Target Group Health Check Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Ip
Address stringType - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - Lambda
Multi boolValue Headers Enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - Load
Balancing stringAlgorithm Type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - Load
Balancing stringAnomaly Mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - Load
Balancing stringCross Zone Enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - Name string
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- Name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - Port int
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - Preserve
Client stringIp - Whether client IP preservation is enabled. See doc for more information.
- Protocol string
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - Protocol
Version string - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - Proxy
Protocol boolV2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - Slow
Start int - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- Stickiness
Pulumi.
Aws. LB. Inputs. Target Group Stickiness Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Dictionary<string, string>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - Target
Failovers List<Pulumi.Aws. LB. Inputs. Target Group Target Failover> - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- Target
Health List<Pulumi.States Aws. LB. Inputs. Target Group Target Health State> - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - Target
Type string Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- Vpc
Id string - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
- Connection
Termination bool - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - Deregistration
Delay int - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- Health
Check TargetGroup Health Check Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Ip
Address stringType - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - Lambda
Multi boolValue Headers Enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - Load
Balancing stringAlgorithm Type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - Load
Balancing stringAnomaly Mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - Load
Balancing stringCross Zone Enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - Name string
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- Name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - Port int
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - Preserve
Client stringIp - Whether client IP preservation is enabled. See doc for more information.
- Protocol string
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - Protocol
Version string - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - Proxy
Protocol boolV2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - Slow
Start int - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- Stickiness
Target
Group Stickiness Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- map[string]string
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - Target
Failovers TargetGroup Target Failover - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- Target
Health TargetStates Group Target Health State - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - Target
Type string Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- Vpc
Id string - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
- connection
Termination Boolean - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - deregistration
Delay Integer - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- health
Check TargetGroup Health Check Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- ip
Address StringType - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - lambda
Multi BooleanValue Headers Enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - load
Balancing StringAlgorithm Type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - load
Balancing StringAnomaly Mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - load
Balancing StringCross Zone Enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - name String
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- name
Prefix String - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - port Integer
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - preserve
Client StringIp - Whether client IP preservation is enabled. See doc for more information.
- protocol String
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - protocol
Version String - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - proxy
Protocol BooleanV2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - slow
Start Integer - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- stickiness
Target
Group Stickiness Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Map<String,String>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - target
Failovers List<TargetGroup Target Failover> - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- target
Health List<TargetStates Group Target Health State> - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - target
Type String Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- vpc
Id String - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
- connection
Termination boolean - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - deregistration
Delay number - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- health
Check pulumiAws.types.input. Target Group Health Check Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- ip
Address stringType - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - lambda
Multi booleanValue Headers Enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - load
Balancing stringAlgorithm Type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - load
Balancing stringAnomaly Mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - load
Balancing stringCross Zone Enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - name string
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- name
Prefix string - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - port number
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - preserve
Client stringIp - Whether client IP preservation is enabled. See doc for more information.
- protocol string
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - protocol
Version string - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - proxy
Protocol booleanV2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - slow
Start number - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- stickiness
pulumi
Aws.types.input. Target Group Stickiness Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- {[key: string]: string}
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - target
Failovers pulumiAws.types.input. Target Group Target Failover[] - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- target
Health pulumiStates Aws.types.input. Target Group Target Health State[] - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - target
Type string Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- vpc
Id string - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
- connection_
termination bool - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - deregistration_
delay int - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- health_
check pulumi_aws.lb. Target Group Health Check Args Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- ip_
address_ strtype - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - lambda_
multi_ boolvalue_ headers_ enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - load_
balancing_ stralgorithm_ type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - load_
balancing_ stranomaly_ mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - load_
balancing_ strcross_ zone_ enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - name str
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- name_
prefix str - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - port int
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - preserve_
client_ strip - Whether client IP preservation is enabled. See doc for more information.
- protocol str
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - protocol_
version str - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - proxy_
protocol_ boolv2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - slow_
start int - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- stickiness
pulumi_
aws.lb. Target Group Stickiness Args Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Mapping[str, str]
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - target_
failovers Sequence[pulumi_aws.lb. Target Group Target Failover Args] - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- target_
health_ Sequence[pulumi_states aws.lb. Target Group Target Health State Args] - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - target_
type str Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- vpc_
id str - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
- connection
Termination Boolean - Whether to terminate connections at the end of the deregistration timeout on Network Load Balancers. See doc for more information. Default is
false
. - deregistration
Delay Number - Amount time for Elastic Load Balancing to wait before changing the state of a deregistering target from draining to unused. The range is 0-3600 seconds. The default value is 300 seconds.
- health
Check Property Map Health Check configuration block. Detailed below.
This type is defined in the AWS Classic package.
- ip
Address StringType - The type of IP addresses used by the target group, only supported when target type is set to
ip
. Possible values areipv4
oripv6
. - lambda
Multi BooleanValue Headers Enabled - Whether the request and response headers exchanged between the load balancer and the Lambda function include arrays of values or strings. Only applies when
target_type
islambda
. Default isfalse
. - load
Balancing StringAlgorithm Type - Determines how the load balancer selects targets when routing requests. Only applicable for Application Load Balancer Target Groups. The value is
round_robin
,least_outstanding_requests
, orweighted_random
. The default isround_robin
. - load
Balancing StringAnomaly Mitigation - Determines whether to enable target anomaly mitigation. Target anomaly mitigation is only supported by the
weighted_random
load balancing algorithm type. See doc for more information. The value is"on"
or"off"
. The default is"off"
. - load
Balancing StringCross Zone Enabled - Indicates whether cross zone load balancing is enabled. The value is
"true"
,"false"
or"use_load_balancer_configuration"
. The default is"use_load_balancer_configuration"
. - name String
- Name of the target group. If omitted, this provider will assign a random, unique name. This name must be unique per region per account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen.
- name
Prefix String - Creates a unique name beginning with the specified prefix. Conflicts with
name
. Cannot be longer than 6 characters. - port Number
- Port on which targets receive traffic, unless overridden when registering a specific target. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
. - preserve
Client StringIp - Whether client IP preservation is enabled. See doc for more information.
- protocol String
- Protocol to use for routing traffic to the targets.
Should be one of
GENEVE
,HTTP
,HTTPS
,TCP
,TCP_UDP
,TLS
, orUDP
. Required whentarget_type
isinstance
,ip
, oralb
. Does not apply whentarget_type
islambda
. - protocol
Version String - Only applicable when
protocol
isHTTP
orHTTPS
. The protocol version. SpecifyGRPC
to send requests to targets using gRPC. SpecifyHTTP2
to send requests to targets using HTTP/2. The default isHTTP1
, which sends requests to targets using HTTP/1.1 - proxy
Protocol BooleanV2 - Whether to enable support for proxy protocol v2 on Network Load Balancers. See doc for more information. Default is
false
. - slow
Start Number - Amount time for targets to warm up before the load balancer sends them a full share of requests. The range is 30-900 seconds or 0 to disable. The default value is 0 seconds.
- stickiness Property Map
Stickiness configuration block. Detailed below.
This type is defined in the AWS Classic package.
- Map<String>
- Map of tags to assign to the resource. If configured with a provider
default_tags
configuration block present, tags with matching keys will overwrite those defined at the provider-level. - target
Failovers List<Property Map> - Target failover block. Only applicable for Gateway Load Balancer target groups. See target_failover for more information.
- target
Health List<Property Map>States - Target health state block. Only applicable for Network Load Balancer target groups when
protocol
isTCP
orTLS
. See target_health_state for more information. - target
Type String Type of target that you must specify when registering targets with this target group. See doc for supported values. The default is
instance
.Note that you can't specify targets for a target group using both instance IDs and IP addresses.
If the target type is
ip
, specify IP addresses from the subnets of the virtual private cloud (VPC) for the target group, the RFC 1918 range (10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16), and the RFC 6598 range (100.64.0.0/10). You can't specify publicly routable IP addresses.Network Load Balancers do not support the
lambda
target type.Application Load Balancers do not support the
alb
target type.- vpc
Id String - Identifier of the VPC in which to create the target group. Required when
target_type
isinstance
,ip
oralb
. Does not apply whentarget_type
islambda
.
Package Details
- Repository
- AWSx (Pulumi Crosswalk for AWS) pulumi/pulumi-awsx
- License
- Apache-2.0