{
|
"AWSTemplateFormatVersion": "2010-09-09",
|
|
"Mappings" : {
|
"AWSNATAMI" : {
|
"us-east-1" : { "AMI" : "ami-c6699baf" },
|
"us-west-2" : { "AMI" : "ami-52ff7262" },
|
"us-west-1" : { "AMI" : "ami-3bcc9e7e" },
|
"eu-west-1" : { "AMI" : "ami-0b5b6c7f" },
|
"ap-southeast-1" : { "AMI" : "ami-02eb9350" },
|
"ap-southeast-2" : { "AMI" : "ami-ab990e91" },
|
"ap-northeast-1" : { "AMI" : "ami-14d86d15" },
|
"sa-east-1" : { "AMI" : "ami-0439e619" }
|
},
|
|
"AWSINSTAMI" : {
|
"us-east-1" : { "AMI" : "ami-a73264ce" },
|
"us-west-2" : { "AMI" : "ami-6aad335a" },
|
"us-west-1" : { "AMI" : "ami-acf9cde9" },
|
"eu-west-1" : { "AMI" : "ami-8e987ef9" },
|
"ap-southeast-1" : { "AMI" : "ami-b84e04ea" },
|
"ap-southeast-2" : { "AMI" : "ami-3d128f07" },
|
"ap-northeast-1" : { "AMI" : "ami-3f32ac3e" },
|
"sa-east-1" : { "AMI" : "ami-35258228" }
|
}
|
},
|
|
"Parameters": {
|
"WebNodes": {
|
"Type": "String",
|
"Default": "5",
|
"Description": "Number of web servers to launch."
|
}
|
},
|
|
"Outputs": {
|
"LoadBalancerIP": {
|
"Value": { "Ref": "LoadBalancerIP" }
|
}
|
},
|
|
"Resources": {
|
"Gateway": {
|
"Type": "AWS::EC2::InternetGateway"
|
},
|
|
"VPC": {
|
"Type": "AWS::EC2::VPC",
|
"Properties": {
|
"CidrBlock": "10.0.0.0/16",
|
"EnableDnsHostnames": true
|
}
|
},
|
|
"VPCGateway": {
|
"Type" : "AWS::EC2::VPCGatewayAttachment",
|
"Properties" : {
|
"InternetGatewayId" : { "Ref": "Gateway" },
|
"VpcId": { "Ref": "VPC" }
|
}
|
},
|
|
"PublicSubnet": {
|
"Type": "AWS::EC2::Subnet",
|
"Properties": {
|
"CidrBlock": "10.0.0.0/24",
|
"VpcId": { "Ref": "VPC" }
|
}
|
},
|
|
"PrivateSubnet": {
|
"Type": "AWS::EC2::Subnet",
|
"Properties": {
|
"CidrBlock": "10.0.1.0/24",
|
"VpcId": { "Ref": "VPC" }
|
}
|
},
|
|
"PrivateSubnetRoute": {
|
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
|
"Properties" : {
|
"RouteTableId" : { "Ref": "PrivateRouteTable" },
|
"SubnetId" : { "Ref": "PrivateSubnet" }
|
}
|
},
|
|
"PrivateRouteTable": {
|
"Type": "AWS::EC2::RouteTable",
|
"Properties": {
|
"VpcId": { "Ref": "VPC" }
|
}
|
},
|
|
"PrivateRouteGlobal": {
|
"Type": "AWS::EC2::Route",
|
"Properties": {
|
"RouteTableId": { "Ref": "PrivateRouteTable" },
|
"DestinationCidrBlock": "0.0.0.0/0",
|
"InstanceId" : { "Ref" : "NATDevice" }
|
},
|
"DependsOn": "PublicRouteGlobal"
|
},
|
|
"PublicSubnetRoute": {
|
"Type" : "AWS::EC2::SubnetRouteTableAssociation",
|
"Properties" : {
|
"RouteTableId" : { "Ref": "PublicRouteTable" },
|
"SubnetId" : { "Ref": "PublicSubnet" }
|
}
|
},
|
|
"PublicRouteTable": {
|
"Type": "AWS::EC2::RouteTable",
|
"Properties": {
|
"VpcId": { "Ref": "VPC" }
|
}
|
},
|
|
"PublicRouteGlobal": {
|
"Type": "AWS::EC2::Route",
|
"Properties": {
|
"RouteTableId": { "Ref": "PublicRouteTable" },
|
"DestinationCidrBlock": "0.0.0.0/0",
|
"GatewayId": { "Ref": "Gateway" }
|
}
|
},
|
|
"NATIPAddress": {
|
"Type": "AWS::EC2::EIP",
|
"Properties": {
|
"Domain": "vpc",
|
"InstanceId": { "Ref": "NATDevice" }
|
},
|
"DependsOn": "VPCGateway"
|
},
|
|
"NATDevice" : {
|
"Type" : "AWS::EC2::Instance",
|
"Properties" : {
|
"SubnetId" : { "Ref" : "PublicSubnet" },
|
"SourceDestCheck" : "false",
|
"ImageId" : { "Fn::FindInMap" : [ "AWSNATAMI", { "Ref" : "AWS::Region" }, "AMI" ]},
|
"SecurityGroupIds" : [
|
{ "Ref" : "InstanceSecurityGroup" }
|
],
|
"Tags": [
|
{ "Key": "Name", "Value": "Serf Demo NAT Device" }
|
]
|
}
|
},
|
|
"LoadBalancer": {
|
"Type": "AWS::EC2::Instance",
|
"Properties": {
|
"ImageId": { "Fn::FindInMap" : [ "AWSINSTAMI", { "Ref" : "AWS::Region" }, "AMI" ]},
|
"PrivateIpAddress": "10.0.0.5",
|
"SecurityGroupIds": [
|
{"Ref": "InstanceSecurityGroup"}
|
],
|
"SubnetId": { "Ref": "PublicSubnet" },
|
"Tags": [
|
{ "Key": "Name", "Value": "Serf Demo LB" }
|
],
|
"UserData": "IyEvYmluL2Jhc2gKTk9ERV9TRVRVUF9VUkw9Imh0dHBzOi8vcmF3LmdpdGh1Yi5jb20vaGFzaGljb3JwL3NlcmYvbWFzdGVyL2RlbW8vd2ViLWxvYWQtYmFsYW5jZXIvc2V0dXBfbG9hZF9iYWxhbmNlci5zaCIKClNFUkZfU0VUVVBfVVJMPSJodHRwczovL3Jhdy5naXRodWIuY29tL2hhc2hpY29ycC9zZXJmL21hc3Rlci9kZW1vL3dlYi1sb2FkLWJhbGFuY2VyL3NldHVwX3NlcmYuc2giCgojIFNldHVwIHRoZSBub2RlIGl0c2VsZgp3Z2V0IC1PIC0gJE5PREVfU0VUVVBfVVJMIHwgYmFzaAoKIyBTZXR1cCB0aGUgc2VyZiBhZ2VudApleHBvcnQgU0VSRl9ST0xFPSJsYiIKd2dldCAtTyAtICRTRVJGX1NFVFVQX1VSTCB8IGJhc2gK"
|
},
|
"DependsOn": "PublicRouteGlobal"
|
},
|
|
"LoadBalancerIP": {
|
"Type" : "AWS::EC2::EIP",
|
"Properties" : {
|
"InstanceId" : { "Ref": "LoadBalancer" },
|
"Domain" : "vpc"
|
},
|
"DependsOn": "VPCGateway"
|
},
|
|
"WebGroup": {
|
"Type": "AWS::AutoScaling::AutoScalingGroup",
|
"Properties": {
|
"AvailabilityZones": [
|
{ "Fn::GetAtt" : [ "PrivateSubnet", "AvailabilityZone" ] }
|
],
|
"LaunchConfigurationName": { "Ref": "WebLaunchConfig" },
|
"DesiredCapacity": { "Ref": "WebNodes" },
|
"MinSize": { "Ref": "WebNodes" },
|
"MaxSize": { "Ref": "WebNodes" },
|
"VPCZoneIdentifier": [
|
{ "Ref": "PrivateSubnet" }
|
]
|
},
|
"DependsOn": ["NATDevice", "NATIPAddress", "PrivateRouteGlobal"]
|
},
|
|
"WebLaunchConfig": {
|
"Type": "AWS::AutoScaling::LaunchConfiguration",
|
"Properties": {
|
"ImageId": { "Fn::FindInMap" : [ "AWSINSTAMI", { "Ref" : "AWS::Region" }, "AMI" ]},
|
"InstanceType": "m1.small",
|
"SecurityGroups": [
|
{"Ref": "InstanceSecurityGroup"}
|
],
|
"UserData": "IyEvYmluL2Jhc2gKTk9ERV9TRVRVUF9VUkw9Imh0dHBzOi8vcmF3LmdpdGh1Yi5jb20vaGFzaGljb3JwL3NlcmYvbWFzdGVyL2RlbW8vd2ViLWxvYWQtYmFsYW5jZXIvc2V0dXBfd2ViX3NlcnZlci5zaCIKClNFUkZfU0VUVVBfVVJMPSJodHRwczovL3Jhdy5naXRodWIuY29tL2hhc2hpY29ycC9zZXJmL21hc3Rlci9kZW1vL3dlYi1sb2FkLWJhbGFuY2VyL3NldHVwX3NlcmYuc2giCgojIFNldHVwIHRoZSBub2RlIGl0c2VsZgp3Z2V0IC1PIC0gJE5PREVfU0VUVVBfVVJMIHwgYmFzaAoKIyBTZXR1cCB0aGUgc2VyZiBhZ2VudApleHBvcnQgU0VSRl9ST0xFPSJ3ZWIiCndnZXQgLU8gLSAkU0VSRl9TRVRVUF9VUkwgfCBiYXNoCg=="
|
}
|
},
|
|
"InstanceSecurityGroup": {
|
"Type": "AWS::EC2::SecurityGroup",
|
"Properties": {
|
"GroupDescription": "Serf demo security group",
|
"VpcId": { "Ref": "VPC" },
|
"SecurityGroupIngress": [{
|
"IpProtocol": "icmp",
|
"FromPort": "-1",
|
"ToPort": "-1",
|
"CidrIp": "0.0.0.0/0"
|
}, {
|
"IpProtocol": "tcp",
|
"FromPort": "22",
|
"ToPort": "22",
|
"CidrIp": "0.0.0.0/0"
|
}, {
|
"IpProtocol": "tcp",
|
"FromPort": "80",
|
"ToPort": "80",
|
"CidrIp": "0.0.0.0/0"
|
}, {
|
"IpProtocol": "tcp",
|
"FromPort": "9999",
|
"ToPort": "9999",
|
"CidrIp": "0.0.0.0/0"
|
}]
|
}
|
},
|
|
"InstanceSecurityGroupSelfRule": {
|
"Type": "AWS::EC2::SecurityGroupIngress",
|
"Properties": {
|
"GroupId": { "Ref": "InstanceSecurityGroup" },
|
"IpProtocol": "-1",
|
"FromPort": "0",
|
"ToPort": "65535",
|
"SourceSecurityGroupId": { "Ref": "InstanceSecurityGroup" }
|
}
|
}
|
}
|
}
|
