NIFCLOUD ELB listener using HTTP protocol

Ce produit n'est pas pris en charge par le site Datadog que vous avez sélectionné. ().
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Metadata

Id: terraform-nifcloud-elb-listener-use-http

Provider: Nifcloud

Platform: Terraform

Severity: Medium

Category: Networking and Firewall

Learn More

Description

The ELB listener uses the HTTP protocol while its ELB network interface is in the ’net-COMMON_GLOBAL’ VIP network. The listener should use HTTPS to enable TLS security features and protect data in transit.

Compliant Code Examples

resource "nifcloud_elb_listener" "negative" {
  elb_id        = nifcloud_elb.negative.id
  instance_port = 1443
  protocol      = "HTTPS"
  lb_port       = 1443
}

resource "nifcloud_elb" "negative" {
  availability_zone = "east-11"
  instance_port     = 443
  protocol          = "HTTPS"
  lb_port           = 443

  network_interface {
    network_id     = "net-COMMON_GLOBAL"
    is_vip_network = true
  }
}

Non-Compliant Code Examples

resource "nifcloud_elb_listener" "positive" {
  elb_id        = nifcloud_elb.positive.id
  instance_port = 80
  protocol      = "HTTP"
  lb_port       = 80
}

resource "nifcloud_elb" "positive" {
  availability_zone = "east-11"
  instance_port     = 8080
  protocol          = "HTTP"
  lb_port           = 8080

  network_interface {
    network_id     = "net-COMMON_GLOBAL"
    is_vip_network = true
  }
}

resource "nifcloud_elb_listener" "positive" {
  elb_id        = nifcloud_elb.positive.id
  instance_port = 80
  protocol      = "HTTP"
  lb_port       = 80
}

resource "nifcloud_elb" "positive" {
  availability_zone = "east-11"
  instance_port     = 8080
  protocol          = "HTTP"
  lb_port           = 8080

  network_interface {
    network_id     = "net-COMMON_GLOBAL"
    is_vip_network = true
  }

  network_interface {
    network_id     = "net-COMMON_PRIVATE"
  }
}