terraform-data-newrelic-whi.../README.md

113 lines
7.0 KiB
Markdown
Raw Permalink Normal View History

2020-10-23 09:14:34 +00:00
# terraform-data-newrelic-whitelist ![](https://img.shields.io/badge/license-MIT-blue.svg) ![GitHub issues](https://img.shields.io/github/issues/captn3m0/terraform-data-newrelic-whitelist) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat-square)](http://makeapullrequest.com)
2019-04-18 11:32:29 +00:00
2020-04-15 19:32:40 +00:00
This module provides lists of the IP addresses and domains used by various New Relic agents and services (for example, https://collector.newrelic.com) for communicating with the New Relic agent installed on your server.
2019-04-18 11:32:29 +00:00
2020-10-23 09:14:34 +00:00
This is maintained against the following sources:
- https://docs.newrelic.com/docs/apm/new-relic-apm/getting-started/networks
2020-10-23 09:14:34 +00:00
- https://docs.newrelic.com/docs/synthetics/synthetic-monitoring/administration/synthetic-public-minion-ips
2019-04-18 11:32:29 +00:00
2021-10-09 08:39:29 +00:00
The following are not included in the module currently, but PRs for the same are welcome:
1. [User-facing domains](https://docs.newrelic.com/docs/using-new-relic/cross-product-functions/install-configure/networks/#user-facing-domains).
2. [FedRAMP endpoints](https://docs.newrelic.com/docs/security/security-privacy/compliance/fedramp-compliant-endpoints/).
2019-04-18 11:32:29 +00:00
# Usage
```hcl
module "newrelic-whitelist" {
source = "captn3m0/newrelic-whitelist/data"
2022-03-07 13:12:31 +00:00
version = "2022.03.07"
2019-04-18 11:32:29 +00:00
}
resource "aws_security_group_rule" "allow_all_to_newrelic" {
type = "egress"
from_port = 0
to_port = 443
protocol = "tcp"
cidr_blocks = ["${module.newrelic-whitelist.cidr}"]
security_group_id = "sg-123456"
}
```
2019-11-14 11:12:11 +00:00
## Outputs
2020-10-23 09:14:34 +00:00
| Name | Description |
|------|-------------|
| apm\_agent\_domains | Wildcard domain endpoints used by APM agents (For both US and EU accounts) |
| apm\_agent\_domains\_eu | Wildcard domain endpoints used by APM agents (For EU accounts) |
| apm\_agent\_domains\_us | Wildcard domain endpoints used by APM agents (For US accounts) |
| apm\_cidrs | List of all New Relic APM CIDRs. Whitelist for egress against 443 |
| apm\_cidrs\_eu | List of New Relic APM CIDRs (EU). Whitelist for egress against 443 |
| apm\_cidrs\_us | List of New Relic APM CIDRs (US). Whitelist for egress against 443 |
| browser\_domains | List of all New Relic Browser application domains. |
| browser\_domains\_eu | List of New Relic Browser application domains (EU). |
| browser\_domains\_us | List of New Relic Browser application domains (US). |
2022-03-07 13:12:31 +00:00
| codestream\_domains | Wildcard hostnames for Newrelic Codestream |
2020-10-23 09:14:34 +00:00
| infra\_agent\_domains | In order to report data to New Relic, Infrastructure needs outbound access to these domains (For both US and EU accounts) |
| infra\_agent\_domains\_eu | In order to report data to New Relic, Infrastructure needs outbound access to these domains (For EU accounts) |
| infra\_agent\_domains\_us | In order to report data to New Relic, Infrastructure needs outbound access to these domains (For US accounts) |
| infra\_cidrs | List of all New Relic Infrastructure Agent CIDRs. Whitelist for egress against 443 |
| infra\_cidrs\_eu | List of New Relic Infrastructure Agent CIDRs (EU). Whitelist for egress against 443 |
| infra\_cidrs\_us | List of New Relic Infrastructure Agent CIDRs (US). Whitelist for egress against 443 |
| mobile\_domains | List of all New Relic Mobile Application domains. |
| mobile\_domains\_eu | List of New Relic Mobile application domains (EU). |
| mobile\_domains\_us | List of New Relic Mobile Application domains (US). |
2021-10-09 08:39:29 +00:00
| opentelemetry\_cidrs | CIDRs for all OpenTelemetry integrations (both US and EU customers) |
| opentelemetry\_cidrs\_eu | CIDRs for all OpenTelemetry integrations (For EU only) |
| opentelemetry\_cidrs\_us | CIDRs for all OpenTelemetry integrations (For US only) |
| opentelemetry\_origins | Host:Port combinations for all OpenTelemetry integrations (both US and EU customers) |
| opentelemetry\_origins\_eu | Host:Port combinations for all OpenTelemetry integrations (For EU only) |
| opentelemetry\_origins\_us | Host:Port combinations for all OpenTelemetry integrations (For US only) |
2021-09-11 14:30:25 +00:00
| pixie\_domains | Domain:Port combinations for Newrelic pixie integration for all customers |
| pixie\_domains\_eu | Domain:Port combinations for Newrelic pixie integration for EU region customers |
| pixie\_domains\_us | Domain:Port combinations for Newrelic pixie integration for US region customers |
2020-10-23 09:14:34 +00:00
| synthetics\_cidrs | List of New Relic Synthetic Minion IPs as /32 CIDR for both US and EU accounts |
| synthetics\_cidrs\_eu | List of New Relic Synthetic Minion IPs as /32 CIDR for EU accounts |
| synthetics\_cidrs\_us | List of New Relic Synthetic Minion IPs as /32 CIDR for US accounts |
| synthetics\_ips | List of New Relic Synthetic Minion IPs for both US and EU accounts |
| synthetics\_ips\_eu | List of New Relic Synthetic Minion IPs for EU accounts |
| synthetics\_ips\_us | List of New Relic Synthetic Minion IPs for US accounts |
| synthetics\_private\_cidrs\_eu | Synthetic Private Minion endpoint IPs as CIDR ranges for EU accounts |
| synthetics\_private\_cidrs\_us | Synthetic Private Minion endpoint IPs as CIDR ranges for US accounts |
| synthetics\_private\_domains\_eu | Synthetic Private Minion endpoint Domains for EU accounts |
| synthetics\_private\_domains\_us | Synthetic Private Minion endpoint Domains for US accounts |
| synthetics\_private\_ips\_eu | Synthetic Private Minion endpoint IPs for eu accounts |
| synthetics\_private\_ips\_us | Synthetic Private Minion endpoint IPs for US accounts |
| ticketing\_cidrs | Third-party ticketing integrations will be sent from these CIDRs (US and EU) |
| ticketing\_cidrs\_eu | Third-party ticketing integrations will be sent from these CIDRs (EU only) |
| ticketing\_cidrs\_us | Third-party ticketing integrations will be sent from these CIDRs (US only) |
| webhook\_cidrs | New Relic-generated webhooks for alert policies will be sent from these CIDRs (US and EU) |
| webhook\_cidrs\_eu | Same as webhook\_cidrs, but exclusively for EU accounts |
| webhook\_cidrs\_us | Same as webhook\_cidrs, but exclusively for US accounts |
2019-04-18 11:32:29 +00:00
2019-04-18 11:35:11 +00:00
# Versioning
2019-11-14 11:12:11 +00:00
This module is versioned as per the New Relic "Last Updated" date on [the docs website](https://docs.newrelic.com/docs/apm/new-relic-apm/getting-started/networks). The versioning scheme is `YYYY.MM.DD` (with zeros for padding). Changes are usually backwards compatible, but if any breaking changes are made (such as output name changes) between released versions, they will be noted below and in the release notes.
2019-04-18 11:35:11 +00:00
2020-04-15 19:32:40 +00:00
If another release has to be made against the same date, they will be suffixed with a `-1`, or `-2` etc.
2022-03-07 13:12:31 +00:00
## 2022.03.07
### Added
- `codestream_domains` output added
2021-10-09 08:39:29 +00:00
## 2021.09.28
### Added
- New outputs for OpenTelemetry Integration; `opentelemetry_origins`,`opentelemetry_origins_us`,`opentelemetry_origins_eu`,`opentelemetry_cidrs`,`opentelemetry_cidrs_us`,`opentelemetry_cidrs_eu`.
2021-09-11 14:30:25 +00:00
## 2021.09.11
## Added
2021-10-09 08:39:29 +00:00
- Domains used by Newrelic Pixie are now supported: : `pixie_domains`,`pixie_domains_us`,`pixie_domains_eu`.
2021-09-11 14:30:25 +00:00
2020-10-23 09:14:34 +00:00
## 2020.10.22
### Fixes
- `apm_domains` was mis-leading. Split it into `apm_agent_domains` and `infra_agent_domains`.
2019-04-18 11:32:29 +00:00
# LICENSE
Licensed under MIT. See [nemo.mit-license.org](https://nemo.mit-license.org/) for complete text.