Doing Infrastucture-as-Code (IaC) with Ansible has given me a headache – so I’ve recently been playing around with Terraform as an alternative to Ansible for certain tasks that require Cloud IaaS interactions.
The goal of this blog post is to build an HA-VPN solution between GCP and an on-premises Cisco IOS-XE device (CSR) using Terraform. BGP will be established over the VPN in order to exchange routes dynamically. GCE compute instances will be deployed in GCP for testing connectivity over the VPN.
Let’s get started.
Imagine looking up toward the sky on an average afternoon, marveling at the piercing blue background salted by white fluffy clouds. Each cloud is uniquely shaped, gloriously afloat, describable in terms even a five-year-old can understand. They look dense enough to stand on, soft enough to sleep on, and righteous enough to spend an afterlife walking among.
Now imagine riding passenger on a Boeing 747. You’re peering out the window as the aircraft takes off. As you ascend, steadily approaching the definitively shaped clouds, they curiously begin to lose shape and opacity. Enter the clouds — your perspective has significantly changed, for you can no longer see them for what they are. Rather, the sky is whitewashed and borderless. Oddly, you may still be able to see others in the distance, but you’re essentially blind to the cloud you’re in. Often times all you’ll see is the giant white soul of the cloud with no sky whatsoever, no coherent shape or texture. (more…)