通过 Terraform 配置规则引擎
功能简介
腾讯云边缘安全加速平台(TencentCloud EdgeOne,下文简称为 EdgeOne)已经接入 Terraform,可以通过 Terraform 来实现快速配置。本文介绍如何使用 Terraform 来配置 EdgeOne 站点的规则引擎,实现子域名差异化配置。
前置条件
1. 已完成 Terraform 的安装与配置,操作步骤请参见 安装和配置 Terraform。
2. 已通过 Terraform 接入了站点,操作步骤请参见 通过 Terraform 创建站点。
操作步骤
1. 修改 Terraform 配置文件,添加子域名 DNS 记录和规则引擎的资源定义。
您可以在 Terraform Provider 文档页面上查看 DNS 记录 和 规则引擎 的参数定义。以下为示例配置文件 tencent_teo.tf 的内容:
terraform {required_providers {tencentcloud = {source = "tencentcloudstack/tencentcloud"version = ">= 1.78.5"}}}provider "tencentcloud" {secret_id = "<your-secret-id>"secret_key = "<your-secret-key>"region = "ap-guangzhou"}resource "tencentcloud_teo_zone" "example" {zone_name = "example.com"plan_type = "ent"tags = {"createdBy" = "terraform"}}# 子域名 DNS 记录resource "tencentcloud_teo_dns_record" "rule_record" {zone_id = tencentcloud_teo_zone.example.idtype = "A"name = "rule.example.com"content = "<your-backend-ip>"mode = "proxied"ttl = 300}# 子域名差异化配置resource "tencentcloud_teo_rule_engine" "rule_example" {zone_id = tencentcloud_teo_zone.example.idrule_name = "example_rule"status = "enable" # 启用该规则rules {# 针对 rule.example.com 且文件后缀为 mp3、mp4 的请求or {and {target = "host"operator = "equal"values = [tencentcloud_teo_dns_record.rule_record.name]}and {target = "extension"operator = "equal"values = ["mp4", "mp3"]}}actions {# 使用指定 CacheKeynormal_action {action = "CacheKey"# CacheKey是大小写敏感的parameters {name = "Type"values = ["IgnoreCase"]}parameters {name = "Switch"values = ["off"]}# CacheKey 包含 User-Agent 头parameters {name = "Type"Values = ["Header"]}parameters {name = "Switch"values = ["on"]}parameters {name = "Value"values = "User-Agent"}}}# 增加指定响应头actions {rewrite_action {action = "ResponseHeader"parameters {action = "add"name = "Added-Header"values = ["Added-Value"]}}}}}
2. 执行
terraform plan
命令预览配置,可以校验配置是否正确。PS tf-doc> terraform plantencentcloud_teo_zone.example: Refreshing state... [id=zone-2ag9gej58j36]Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:+ createTerraform will perform the following actions:# tencentcloud_teo_dns_record.rule_record will be created+ resource "tencentcloud_teo_dns_record" "rule_record" {+ cname = (known after apply)+ content = "<your-backend-ip>"+ created_on = (known after apply)+ dns_record_id = (known after apply)+ domain_status = (known after apply)+ id = (known after apply)+ locked = (known after apply)+ mode = "proxied"+ modified_on = (known after apply)+ name = "rule.example.com"+ priority = (known after apply)+ status = (known after apply)+ ttl = 300+ type = "A"+ zone_id = "zone-2ag9gej58j36"}# tencentcloud_teo_rule_engine.rule_example will be created+ resource "tencentcloud_teo_rule_engine" "rule_example" {+ id = (known after apply)+ rule_id = (known after apply)+ rule_name = "example_rule"+ status = "enable"+ zone_id = "zone-2ag9gej58j36"+ rules {+ actions {+ normal_action {+ action = "CacheKey"+ parameters {+ name = "Type"+ values = [+ "IgnoreCase",]}+ parameters {+ name = "Switch"+ values = [+ "off",]}+ parameters {+ name = "Type"+ values = [+ "Header",]}+ parameters {+ name = "Switch"+ values = [+ "on",]}+ parameters {+ name = "Value"+ values = [+ "User-Agent",]}}}+ actions {+ rewrite_action {+ action = "ResponseHeader"+ parameters {+ action = "add"+ name = "Added-Header"+ values = [+ "Added-Value",]}}}+ or {+ and {+ operator = "equal"+ target = "host"+ values = [+ "rule.example.com",]}+ and {+ operator = "equal"+ target = "extension"+ values = [+ "mp3",+ "mp4",]}}}}Plan: 2 to add, 0 to change, 0 to destroy.───────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────Note: You didn't use the -out option to save this plan, so Terraform can't guarantee to take exactly these actions if you run "terraform apply" now.
3. 执行
terraform apply
创建子域名 DNS 记录和规则引擎。
执行 apply 命令后 Terraform 会让您再次确认将要执行的动作。在确认无误后输入yes
二次确认,然后等待命令执行完成。PS tf-doc> terraform applytencentcloud_teo_zone.example: Refreshing state... [id=zone-2ag9gej58j36]Terraform used the selected providers to generate the following execution plan. Resource actions are indicated with the following symbols:+ createTerraform will perform the following actions:# tencentcloud_teo_dns_record.rule_record will be created+ resource "tencentcloud_teo_dns_record" "rule_record" {+ cname = (known after apply)+ content = "<your-backend-ip>"+ created_on = (known after apply)+ dns_record_id = (known after apply)+ domain_status = (known after apply)+ id = (known after apply)+ locked = (known after apply)+ mode = "proxied"+ modified_on = (known after apply)+ name = "rule.example.com"+ priority = (known after apply)+ status = (known after apply)+ ttl = 300+ type = "A"+ zone_id = "zone-2ag9gej58j36"}# tencentcloud_teo_rule_engine.rule_example will be created+ resource "tencentcloud_teo_rule_engine" "rule_example" {+ id = (known after apply)+ rule_id = (known after apply)+ rule_name = "example_rule"+ status = "enable"+ zone_id = "zone-2ag9gej58j36"+ rules {+ actions {+ normal_action {+ action = "CacheKey"+ parameters {+ name = "Type"+ values = [+ "IgnoreCase",]}+ parameters {+ name = "Switch"+ values = [+ "off",]}+ parameters {+ name = "Type"+ values = [+ "Header",]}+ parameters {+ name = "Switch"+ values = [+ "on",]}+ parameters {+ name = "Value"+ values = [+ "User-Agent",]}}}+ actions {+ rewrite_action {+ action = "ResponseHeader"+ parameters {+ action = "add"+ name = "Added-Header"+ values = [+ "Added-Value",]}}}+ or {+ and {+ operator = "equal"+ target = "host"+ values = [+ "rule.example.com",]}+ and {+ operator = "equal"+ target = "extension"+ values = [+ "mp3",+ "mp4",]}}}}Plan: 2 to add, 0 to change, 0 to destroy.Do you want to perform these actions?Terraform will perform the actions described above.Only 'yes' will be accepted to approve.Enter a value: yestencentcloud_teo_dns_record.rule_record: Creating...tencentcloud_teo_dns_record.rule_record: Creation complete after 2s [id=zone-2ag9gej58j36#record-2ahmb3w7ssl8]tencentcloud_teo_rule_engine.rule_example: Creating...tencentcloud_teo_rule_engine.rule_example: Creation complete after 1s [id=zone-2ag9gej58j36#rule-2ahmb5dhn9qq]Apply complete! Resources: 2 added, 0 changed, 0 destroyed.
4. 检查命令执行结果。
您可以通过
terraform show
命令检查站点加速配置是否生效,也可以登录 边缘安全加速平台控制台 来确认。PS tf-doc> terraform state show tencentcloud_teo_dns_record.rule_record# tencentcloud_teo_dns_record.rule_record:resource "tencentcloud_teo_dns_record" "rule_record" {content = "<your-backend-ip>"created_on = "2022-10-20T06:31:38Z"dns_record_id = "record-2ahmb3w7ssl8"domain_status = ["security",]id = "zone-2ag9gej58j36#record-2ahmb3w7ssl8"locked = falsemode = "proxied"modified_on = "2022-10-20T06:31:38Z"name = "rule.example.com"priority = 0status = "active"ttl = 300type = "A"zone_id = "zone-2ag9gej58j36"}PS tf-doc> terraform state show tencentcloud_teo_rule_engine.rule_example# tencentcloud_teo_rule_engine.rule_example:resource "tencentcloud_teo_rule_engine" "rule_example" {id = "zone-2ag9gej58j36#rule-2ahmb5dhn9qq"rule_id = "rule-2ahmb5dhn9qq"rule_name = "example_rule"status = "enable"zone_id = "zone-2ag9gej58j36"rules {actions {normal_action {action = "CacheKey"parameters {name = "Type"values = ["IgnoreCase",]}parameters {name = "Switch"values = ["off",]}parameters {name = "Type"values = ["Header",]}parameters {name = "Switch"values = ["on",]}parameters {name = "Value"values = ["User-Agent",]}}}actions {rewrite_action {action = "ResponseHeader"parameters {action = "add"name = "Added-Header"values = ["Added-Value",]}}}or {and {operator = "equal"target = "host"values = ["rule.example.com",]}and {operator = "equal"target = "extension"values = ["mp3","mp4",]}}}}