- Log into your AliCloud account. If you do not already have one, create one by following the instructions in the AliCloud article Create a RAM user. The RAM account must have the minimum required permissions as listed in the section RAM account permissions.
- Create an AliCloud AccessKey. For details on creating one, refer to the AliCloud article Create an AccessKey. This will create an AccessKeyID and an AccessKeySecret.
- Install Terraform. For installation details, refer to the HashiCorp article Install Terraform.
- Obtain the FortiGate Autoscale for AliCloud deployment package. Visit the GitHub project release page and download the
fortigate-autoscale-alicloud.ziprelease for the version you want to use.
- Unzip the file on your local PC. The following files and folders will be extracted:
├── alicloud_function_compute ├── alicloud_terraform ├── core ├── dist ├── LICENSE ├── node_modules ├── package.json ├── scripts └── test
- In your terminal, change to the alicloud_terraform folder:
The alicloud_terraform folder contains the following files:
├── assets │ └── configset │ ├── baseconfig │ ├── httproutingpolicy │ ├── httpsroutingpolicy │ ├── internalelbweb │ └── storelogtofaz ├── main.tf └── vars.tf
baseconfig contains the
cloud-initconfiguration for the FortiGate-VM and can be adjusted to support more advanced setups.
- main.tf contains the majority of the deployment code. As part of the deployment it will upload the baseconfig to an OSS bucket to be used by the FortiGate-VM instances.
- vars.tf contains the variables required for the deployment. For example: image ID (instance_ami), cluster name, instance, region, etc. For descriptions of the included variables, refer to the section Terraform variables.
- baseconfig contains the
- Edit the vars.tf file and customize variables for the deployment.
The OSS bucket name must be lowercase.
The Function Compute URL may not be more than 127 characters. The variable cluster_name is used to create this URL.
- Initialize the providers and modules with the command
- Submit the Terraform plan using the command below.
terraform plan -var "access_key=<access_key>" -var "secret_key=<secret_key>" -var "region=<region>"
- Confirm and apply the plan:
terraform apply -var "access_key=<access_key>" -var "secret_key=<secret_key>" -var "region=<region>"
Output will be similar to below. A randomly generated three letter suffix is added to all resources and can be used to help identify your cluster resources.
Apply complete! Resources: 48 added, 0 changed, 0 destroyed. Outputs: Auto Scaling Group ID = asg-0xi1g2hk9z048yn6cuu1 AutoScale External Load Balancer IP = 18.104.22.168 PSK Secret = !_YfA7FQ@b_aYuei Scale In Threshold = 35 Scale Out Threshold = 70 VPC name = FortigateAutoScale-rrr