A Direct Link Gateway Whose Route Filters Deny by Default, Which the API Does Not

A Direct Link gateway with both default route filters set to deny, because permit accepts every prefix the other side advertises including a default route that would pull the VPC's whole egress across the circuit. The BGP session is authenticated, BFD is on, global routing and metered billing are required inputs, and a virtual connection per VPC is what makes the circuit reach anything.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformIBM CloudNetworking & VPCv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Local Transit Gateway with a Connection per VPC and Prefix Filters as the Route Table A Policy-Mode VPN Gateway with Its Own IKE and IPsec Policies Pinned to Strong Cryptography A Virtual Private Endpoint Gateway with a Reserved IP per Zone Behind Your Security Groups IBM Cloud VPC Landing Zone (Lite)VPC Public Gateways per Zone with the Subnets Attached

The same job on other clouds

Dedicated Interconnect on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A Direct Connect Gateway, with the CCN Routes Published Rather Than Left UnsaidTencent Cloud A FastConnect Circuit with BFD, a Partner, and a GatewayOracle Cloud A Virtual Border Router with BFD On and the Attachment That Makes It Reach a VPCAlibaba Cloud A Virtual Gateway and Interface with the BGP Session Authenticated and BFD OnHuawei Cloud An ExpressRoute Circuit with Peering and No Illusion of EncryptionAzure Direct Connect, and the Fact that It Is Not EncryptedAWS Interconnect Attachments in a Pair, Encrypted by DecisionGoogle Cloud

Installing it

module "ibm_direct_link" {
  source  = "www.iac-bazaar.com/iac-bazaar/ibm-direct-link/ibmcloud"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.