A Local Transit Gateway with a Connection per VPC and Prefix Filters as the Route Table

An IBM Cloud Transit Gateway local to one region (global by name) with a connection per VPC you name, each denying every prefix by default and permitting the prefix rules you write, since a transit gateway has no route tables and every connection advertises everything otherwise; a connection that permits all has to say so.

This is the operations reference: version drift, dependants and neighbours. For what the module provisions, its inputs and outputs, and how to buy it, see the catalogue entry.

terraformIBM CloudNetworking & VPCv1.0.0static-validated

Provider drift

This artifact declares no Terraform provider requirements, so there is nothing to drift. Provider freshness applies to Terraform and OpenTofu modules.

What depends on this

No reference architecture names this module, so changing it affects only configurations that reference it directly.

Nearest alternatives

Same cloud, same category. These are what you would weigh against it without changing provider.

A Direct Link Gateway Whose Route Filters Deny by Default, Which the API Does Not A Policy-Mode VPN Gateway with Its Own IKE and IPsec Policies Pinned to Strong Cryptography A Virtual Private Endpoint Gateway with a Reserved IP per Zone Behind Your Security Groups IBM Cloud VPC Landing Zone (Lite)VPC Public Gateways per Zone with the Subnets Attached

The same job on other clouds

Transit Hub on other providers. Useful when the cloud is still open, or when you are pricing a second one. How far a comparison like that can be trusted is covered in comparing clouds.

A CEN Transit Router with Explicit Route Tables and a VPC Attachment per VPC, Each a DecisionAlibaba Cloud A Cloud Connect Network with Explicit Route Tables and a VPC Attachment per VPC Bound to OneTencent Cloud A Hub with Spokes that Do Not Export EverythingGoogle Cloud A Virtual WAN Hub with Connections and Encrypted BranchesAzure An Enterprise Router across Two Zones with Explicit Route Tables and a VPC Attachment per VPCHuawei Cloud DRG Hub & Spoke ConnectivityOracle Cloud Transit Gateway Hub with Explicit RoutingAWS

Installing it

module "ibm_transit_gateway" {
  source  = "www.iac-bazaar.com/iac-bazaar/ibm-transit-gateway/ibmcloud"
  version = "1.0.0"
}

A registry token is required for the download itself. Installing through the registry protocol has the two credential steps.