Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Azure Firewall custom DNS server #615

Merged
merged 17 commits into from
Sep 9, 2023
Merged

Azure Firewall custom DNS server #615

Show file tree
Hide file tree
Changes from 8 commits
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
0d353ef
Add Bastion native client support
Aug 10, 2023
12cd2c4
Update infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep
juang903 Aug 11, 2023
ee3c4b4
Update infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep
juang903 Aug 11, 2023
cae5fb4
Update infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep
juang903 Aug 11, 2023
38b5504
updating markdown
Aug 11, 2023
33852ca
Merge branch 'Azure:main' into main
juang903 Aug 18, 2023
7bd31ed
add custom dns support for azure firewall
Aug 18, 2023
462cd41
markdown file changes
Aug 18, 2023
20fa7ab
add azure firewall custom dns on vwan
Aug 18, 2023
5e94d77
Generate Parameter Markdowns [juang903/4927a392]
github-actions[bot] Aug 18, 2023
1494503
Merge branch 'main' into feature/azfw-custom-dns
juang903 Aug 18, 2023
819251c
Added new params
Aug 22, 2023
ba92aa8
Merge branch 'main' into feature/azfw-custom-dns
jtracey93 Sep 5, 2023
866253f
fix linting errors
Sep 6, 2023
f2b7b92
Update vwanConnectivity.parameters.all.json
jtracey93 Sep 7, 2023
5eec096
Update mc-vwanConnectivity.parameters.all.json
jtracey93 Sep 7, 2023
8d6e41e
Merge branch 'main' into feature/azfw-custom-dns
jtracey93 Sep 7, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 10 additions & 0 deletions infra-as-code/bicep/modules/hubNetworking/generateddocs/hubNetworking.bicep.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@ parAzFirewallAvailabilityZones | No | Availability Zones to deploy the Azu
parAzErGatewayAvailabilityZones | No | Availability Zones to deploy the VPN/ER PIP across. Region must support Availability Zones to use. If it does not then leave empty. Ensure that you select a zonal SKU for the ER/VPN Gateway if using Availability Zones for the PIP.
parAzVpnGatewayAvailabilityZones | No | Availability Zones to deploy the VPN/ER PIP across. Region must support Availability Zones to use. If it does not then leave empty. Ensure that you select a zonal SKU for the ER/VPN Gateway if using Availability Zones for the PIP.
parAzFirewallDnsProxyEnabled | No | Switch to enable/disable Azure Firewall DNS Proxy.
parAzFirewallDnsServers | No | Array of custom DNS servers used by Azure Firewall
parHubRouteTableName | No | Name of Route table to create for the default route of Hub.
parDisableBgpRoutePropagation | No | Switch to enable/disable BGP Propagation on route table.
parPrivateDnsZonesEnabled | No | Switch to enable/disable Private DNS Zones deployment.
Expand Down Expand Up @@ -236,6 +237,12 @@ Switch to enable/disable Azure Firewall DNS Proxy.

- Default value: `True`

### parAzFirewallDnsServers

![Parameter Setting](https://img.shields.io/badge/parameter-optional-green?style=flat-square)

Array of custom DNS servers used by Azure Firewall

### parHubRouteTableName

![Parameter Setting](https://img.shields.io/badge/parameter-optional-green?style=flat-square)
Expand Down Expand Up @@ -449,6 +456,9 @@ outHubVirtualNetworkId | string |
"parAzFirewallDnsProxyEnabled": {
"value": true
},
"parAzFirewallDnsServers": {
"value": []
},
"parHubRouteTableName": {
"value": "[format('{0}-hub-routetable', parameters('parCompanyPrefix'))]"
},
Expand Down
4 changes: 4 additions & 0 deletions infra-as-code/bicep/modules/hubNetworking/hubNetworking.bicep
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -126,6 +126,9 @@ param parAzVpnGatewayAvailabilityZones array = []
@sys.description('Switch to enable/disable Azure Firewall DNS Proxy.')
param parAzFirewallDnsProxyEnabled bool = true

@sys.description('Array of custom DNS servers used by Azure Firewall')
param parAzFirewallDnsServers array = []

@sys.description('Name of Route table to create for the default route of Hub.')
param parHubRouteTableName string = '${parCompanyPrefix}-hub-routetable'

Expand Down Expand Up @@ -661,6 +664,7 @@ resource resFirewallPolicies 'Microsoft.Network/firewallPolicies@2023-02-01' = i
} : {
dnsSettings: {
enableProxy: parAzFirewallDnsProxyEnabled
servers: parAzFirewallDnsServers
}
sku: {
tier: parAzFirewallTier
Expand Down