pulumi-alicloud 3.73.0a1736850863__py3-none-any.whl → 3.74.0a1737090935__py3-none-any.whl

pulumi_alicloud/vpn/_inputs.py

@@ -51,15 +51,18 @@ if not MYPY:
     class ConnectionBgpConfigArgsDict(TypedDict):
         enable: NotRequired[pulumi.Input[bool]]
         """
-        Bgp enable.
+        specifies whether to enable BGP. Valid values: true and false (default).
         """
         local_asn: NotRequired[pulumi.Input[str]]
         """
-        Local asn.
+        the autonomous system number (ASN) on the Alibaba Cloud side. 
+        Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.).
+        Each segment is 16 bits in length. Enter the number in each segment in decimal format.
+        For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
         """
         local_bgp_ip: NotRequired[pulumi.Input[str]]
         """
-        Local bgp IP.
+        the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
         """
         status: NotRequired[pulumi.Input[str]]
         """
@@ -67,7 +70,7 @@ if not MYPY:
         """
         tunnel_cidr: NotRequired[pulumi.Input[str]]
         """
-        IPSec tunnel Cidr.
+        The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
         """
 elif False:
     ConnectionBgpConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -81,11 +84,14 @@ class ConnectionBgpConfigArgs:
                  status: Optional[pulumi.Input[str]] = None,
                  tunnel_cidr: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[bool] enable: Bgp enable.
-        :param pulumi.Input[str] local_asn: Local asn.
-        :param pulumi.Input[str] local_bgp_ip: Local bgp IP.
+        :param pulumi.Input[bool] enable: specifies whether to enable BGP. Valid values: true and false (default).
+        :param pulumi.Input[str] local_asn: the autonomous system number (ASN) on the Alibaba Cloud side. 
+               Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.).
+               Each segment is 16 bits in length. Enter the number in each segment in decimal format.
+               For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
+        :param pulumi.Input[str] local_bgp_ip: the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
         :param pulumi.Input[str] status: The negotiation status of Tunnel.
-        :param pulumi.Input[str] tunnel_cidr: IPSec tunnel Cidr.
+        :param pulumi.Input[str] tunnel_cidr: The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
         """
         if enable is not None:
             pulumi.set(__self__, "enable", enable)
@@ -102,7 +108,7 @@ class ConnectionBgpConfigArgs:
     @pulumi.getter
     def enable(self) -> Optional[pulumi.Input[bool]]:
         """
-        Bgp enable.
+        specifies whether to enable BGP. Valid values: true and false (default).
         """
         return pulumi.get(self, "enable")
 
@@ -114,7 +120,10 @@ class ConnectionBgpConfigArgs:
     @pulumi.getter(name="localAsn")
     def local_asn(self) -> Optional[pulumi.Input[str]]:
         """
-        Local asn.
+        the autonomous system number (ASN) on the Alibaba Cloud side. 
+        Valid values: 1 to 4294967295. Default value: 45104. You can enter a value in two segments separated by a period (.).
+        Each segment is 16 bits in length. Enter the number in each segment in decimal format.
+        For example, if you enter 123.456, the ASN is 8061384. The ASN is calculated by using the following formula: 123 × 65536 + 456 = 8061384.
         """
         return pulumi.get(self, "local_asn")
 
@@ -126,7 +135,7 @@ class ConnectionBgpConfigArgs:
     @pulumi.getter(name="localBgpIp")
     def local_bgp_ip(self) -> Optional[pulumi.Input[str]]:
         """
-        Local bgp IP.
+        the BGP address on the Alibaba Cloud side. It must be an IP address that falls within the CIDR block of the IPsec tunnel.
         """
         return pulumi.get(self, "local_bgp_ip")
 
@@ -150,7 +159,7 @@ class ConnectionBgpConfigArgs:
     @pulumi.getter(name="tunnelCidr")
     def tunnel_cidr(self) -> Optional[pulumi.Input[str]]:
         """
-        IPSec tunnel Cidr.
+        The CIDR block of the IPsec tunnel. The CIDR block must belong to 169.254.0.0/16 and the subnet mask is 30 bits in length.
         """
         return pulumi.get(self, "tunnel_cidr")
 
@@ -163,23 +172,23 @@ if not MYPY:
     class ConnectionHealthCheckConfigArgsDict(TypedDict):
         dip: NotRequired[pulumi.Input[str]]
         """
-        Destination IP.
+        the destination IP address configured for health checks.
         """
         enable: NotRequired[pulumi.Input[bool]]
         """
-        Specifies whether to enable healthcheck.
+        specifies whether to enable health checks. Valid values: true and false. Default value: false.
         """
         interval: NotRequired[pulumi.Input[int]]
         """
-        Retry interval.
+        the time interval of health check retries. Unit: seconds. Default value: 3.
         """
         retry: NotRequired[pulumi.Input[int]]
         """
-        retry times.
+        the maximum number of health check retries. Default value: 3.
         """
         sip: NotRequired[pulumi.Input[str]]
         """
-        Source IP.
+        the source IP address that is used for health checks.
         """
 elif False:
     ConnectionHealthCheckConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -193,11 +202,11 @@ class ConnectionHealthCheckConfigArgs:
                  retry: Optional[pulumi.Input[int]] = None,
                  sip: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] dip: Destination IP.
-        :param pulumi.Input[bool] enable: Specifies whether to enable healthcheck.
-        :param pulumi.Input[int] interval: Retry interval.
-        :param pulumi.Input[int] retry: retry times.
-        :param pulumi.Input[str] sip: Source IP.
+        :param pulumi.Input[str] dip: the destination IP address configured for health checks.
+        :param pulumi.Input[bool] enable: specifies whether to enable health checks. Valid values: true and false. Default value: false.
+        :param pulumi.Input[int] interval: the time interval of health check retries. Unit: seconds. Default value: 3.
+        :param pulumi.Input[int] retry: the maximum number of health check retries. Default value: 3.
+        :param pulumi.Input[str] sip: the source IP address that is used for health checks.
         """
         if dip is not None:
             pulumi.set(__self__, "dip", dip)
@@ -214,7 +223,7 @@ class ConnectionHealthCheckConfigArgs:
     @pulumi.getter
     def dip(self) -> Optional[pulumi.Input[str]]:
         """
-        Destination IP.
+        the destination IP address configured for health checks.
         """
         return pulumi.get(self, "dip")
 
@@ -226,7 +235,7 @@ class ConnectionHealthCheckConfigArgs:
     @pulumi.getter
     def enable(self) -> Optional[pulumi.Input[bool]]:
         """
-        Specifies whether to enable healthcheck.
+        specifies whether to enable health checks. Valid values: true and false. Default value: false.
         """
         return pulumi.get(self, "enable")
 
@@ -238,7 +247,7 @@ class ConnectionHealthCheckConfigArgs:
     @pulumi.getter
     def interval(self) -> Optional[pulumi.Input[int]]:
         """
-        Retry interval.
+        the time interval of health check retries. Unit: seconds. Default value: 3.
         """
         return pulumi.get(self, "interval")
 
@@ -250,7 +259,7 @@ class ConnectionHealthCheckConfigArgs:
     @pulumi.getter
     def retry(self) -> Optional[pulumi.Input[int]]:
         """
-        retry times.
+        the maximum number of health check retries. Default value: 3.
         """
         return pulumi.get(self, "retry")
 
@@ -262,7 +271,7 @@ class ConnectionHealthCheckConfigArgs:
     @pulumi.getter
     def sip(self) -> Optional[pulumi.Input[str]]:
         """
-        Source IP.
+        the source IP address that is used for health checks.
         """
         return pulumi.get(self, "sip")
 
@@ -275,39 +284,42 @@ if not MYPY:
     class ConnectionIkeConfigArgsDict(TypedDict):
         ike_auth_alg: NotRequired[pulumi.Input[str]]
         """
-        IKE auth Algorithm.
+        the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
         """
         ike_enc_alg: NotRequired[pulumi.Input[str]]
         """
-        IKE encript algorithm.
+        the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
         """
         ike_lifetime: NotRequired[pulumi.Input[int]]
         """
-        IKE lifetime.
+        the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
         """
         ike_local_id: NotRequired[pulumi.Input[str]]
         """
-        The local ID, which supports the FQDN and IP formats, and defaults to the IP address of the selected VPN gateway.
+        the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
         """
         ike_mode: NotRequired[pulumi.Input[str]]
         """
-        IKE mode, supports main and aggressive mode. The main mode is highly secure. If NAT traversal is enabled, we recommend that you use the aggressive mode.
+        the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.
+        - main: This mode offers higher security during negotiations.
+        - aggressive: This mode supports faster negotiations and a higher success rate.
         """
         ike_pfs: NotRequired[pulumi.Input[str]]
         """
-        DH group.
+        the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
         """
         ike_remote_id: NotRequired[pulumi.Input[str]]
         """
-        The peer ID. The FQDN and IP address formats are supported. The default value is the IP address of the selected customer gateway.
+        the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
         """
         ike_version: NotRequired[pulumi.Input[str]]
         """
-        IKE version.
+        the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1.
+        Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
         """
         psk: NotRequired[pulumi.Input[str]]
         """
-        Preshared secret key.
+        the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!\\`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
         """
 elif False:
     ConnectionIkeConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -325,15 +337,18 @@ class ConnectionIkeConfigArgs:
                  ike_version: Optional[pulumi.Input[str]] = None,
                  psk: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] ike_auth_alg: IKE auth Algorithm.
-        :param pulumi.Input[str] ike_enc_alg: IKE encript algorithm.
-        :param pulumi.Input[int] ike_lifetime: IKE lifetime.
-        :param pulumi.Input[str] ike_local_id: The local ID, which supports the FQDN and IP formats, and defaults to the IP address of the selected VPN gateway.
-        :param pulumi.Input[str] ike_mode: IKE mode, supports main and aggressive mode. The main mode is highly secure. If NAT traversal is enabled, we recommend that you use the aggressive mode.
-        :param pulumi.Input[str] ike_pfs: DH group.
-        :param pulumi.Input[str] ike_remote_id: The peer ID. The FQDN and IP address formats are supported. The default value is the IP address of the selected customer gateway.
-        :param pulumi.Input[str] ike_version: IKE version.
-        :param pulumi.Input[str] psk: Preshared secret key.
+        :param pulumi.Input[str] ike_auth_alg: the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
+        :param pulumi.Input[str] ike_enc_alg: the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
+        :param pulumi.Input[int] ike_lifetime: the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
+        :param pulumi.Input[str] ike_local_id: the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
+        :param pulumi.Input[str] ike_mode: the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.
+               - main: This mode offers higher security during negotiations.
+               - aggressive: This mode supports faster negotiations and a higher success rate.
+        :param pulumi.Input[str] ike_pfs: the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
+        :param pulumi.Input[str] ike_remote_id: the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
+        :param pulumi.Input[str] ike_version: the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1.
+               Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
+        :param pulumi.Input[str] psk: the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!\\`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
         """
         if ike_auth_alg is not None:
             pulumi.set(__self__, "ike_auth_alg", ike_auth_alg)
@@ -358,7 +373,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeAuthAlg")
     def ike_auth_alg(self) -> Optional[pulumi.Input[str]]:
         """
-        IKE auth Algorithm.
+        the authentication algorithm that is used in Phase 1 negotiations. Valid values: md5, sha1, sha2
         """
         return pulumi.get(self, "ike_auth_alg")
 
@@ -370,7 +385,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeEncAlg")
     def ike_enc_alg(self) -> Optional[pulumi.Input[str]]:
         """
-        IKE encript algorithm.
+        the encryption algorithm that is used in Phase 1 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
         """
         return pulumi.get(self, "ike_enc_alg")
 
@@ -382,7 +397,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeLifetime")
     def ike_lifetime(self) -> Optional[pulumi.Input[int]]:
         """
-        IKE lifetime.
+        the SA lifetime as a result of Phase 1 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
         """
         return pulumi.get(self, "ike_lifetime")
 
@@ -394,7 +409,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeLocalId")
     def ike_local_id(self) -> Optional[pulumi.Input[str]]:
         """
-        The local ID, which supports the FQDN and IP formats, and defaults to the IP address of the selected VPN gateway.
+        the identifier of the VPN gateway. It can contain at most 100 characters. The default value is the IP address of the VPN gateway.
         """
         return pulumi.get(self, "ike_local_id")
 
@@ -406,7 +421,9 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeMode")
     def ike_mode(self) -> Optional[pulumi.Input[str]]:
         """
-        IKE mode, supports main and aggressive mode. The main mode is highly secure. If NAT traversal is enabled, we recommend that you use the aggressive mode.
+        the negotiation mode of IKE. Valid values: main and aggressive. Default value: main.
+        - main: This mode offers higher security during negotiations.
+        - aggressive: This mode supports faster negotiations and a higher success rate.
         """
         return pulumi.get(self, "ike_mode")
 
@@ -418,7 +435,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikePfs")
     def ike_pfs(self) -> Optional[pulumi.Input[str]]:
         """
-        DH group.
+        the Diffie-Hellman key exchange algorithm that is used in Phase 1 negotiations. Valid values: group1, group2, group5, and group14. Default value: group2.
         """
         return pulumi.get(self, "ike_pfs")
 
@@ -430,7 +447,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeRemoteId")
     def ike_remote_id(self) -> Optional[pulumi.Input[str]]:
         """
-        The peer ID. The FQDN and IP address formats are supported. The default value is the IP address of the selected customer gateway.
+        the identifier of the customer gateway. It can contain at most 100 characters. The default value is the IP address of the customer gateway.
         """
         return pulumi.get(self, "ike_remote_id")
 
@@ -442,7 +459,8 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter(name="ikeVersion")
     def ike_version(self) -> Optional[pulumi.Input[str]]:
         """
-        IKE version.
+        the version of the Internet Key Exchange (IKE) protocol. Valid values: ikev1 and ikev2. Default value: ikev1.
+        Compared with IKEv1, IKEv2 simplifies the security association (SA) negotiation process and provides better support for scenarios with multiple CIDR blocks.
         """
         return pulumi.get(self, "ike_version")
 
@@ -454,7 +472,7 @@ class ConnectionIkeConfigArgs:
     @pulumi.getter
     def psk(self) -> Optional[pulumi.Input[str]]:
         """
-        Preshared secret key.
+        the pre-shared key that is used for identity authentication between the VPN gateway and the on-premises data center. The key must be 1 to 100 characters in length and can contain digits, letters, and the following special characters: ~!\\`@#$%^&*()_-+={}[]|;:',.<>/? If you do not specify a pre-shared key, the system randomly generates a 16-bit string as the pre-shared key. You can call the DescribeVpnConnection operation to query the pre-shared key that is automatically generated by the system.
         """
         return pulumi.get(self, "psk")
 
@@ -467,19 +485,19 @@ if not MYPY:
     class ConnectionIpsecConfigArgsDict(TypedDict):
         ipsec_auth_alg: NotRequired[pulumi.Input[str]]
         """
-        IPsec authentication algorithm. sha1 and md5 are supported.
+        the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
         """
         ipsec_enc_alg: NotRequired[pulumi.Input[str]]
         """
-        IPsec Encript algorithm.
+        the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
         """
         ipsec_lifetime: NotRequired[pulumi.Input[int]]
         """
-        IPsec lifetime.
+        the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
         """
         ipsec_pfs: NotRequired[pulumi.Input[str]]
         """
-        DH Group.
+        the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
         """
 elif False:
     ConnectionIpsecConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -492,10 +510,10 @@ class ConnectionIpsecConfigArgs:
                  ipsec_lifetime: Optional[pulumi.Input[int]] = None,
                  ipsec_pfs: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] ipsec_auth_alg: IPsec authentication algorithm. sha1 and md5 are supported.
-        :param pulumi.Input[str] ipsec_enc_alg: IPsec Encript algorithm.
-        :param pulumi.Input[int] ipsec_lifetime: IPsec lifetime.
-        :param pulumi.Input[str] ipsec_pfs: DH Group.
+        :param pulumi.Input[str] ipsec_auth_alg: the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
+        :param pulumi.Input[str] ipsec_enc_alg: the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
+        :param pulumi.Input[int] ipsec_lifetime: the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
+        :param pulumi.Input[str] ipsec_pfs: the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
         """
         if ipsec_auth_alg is not None:
             pulumi.set(__self__, "ipsec_auth_alg", ipsec_auth_alg)
@@ -510,7 +528,7 @@ class ConnectionIpsecConfigArgs:
     @pulumi.getter(name="ipsecAuthAlg")
     def ipsec_auth_alg(self) -> Optional[pulumi.Input[str]]:
         """
-        IPsec authentication algorithm. sha1 and md5 are supported.
+        the authentication algorithm that is used in Phase 2 negotiations. Valid values: md5, sha1, sha256, sha384, and sha512. Default value: md5.
         """
         return pulumi.get(self, "ipsec_auth_alg")
 
@@ -522,7 +540,7 @@ class ConnectionIpsecConfigArgs:
     @pulumi.getter(name="ipsecEncAlg")
     def ipsec_enc_alg(self) -> Optional[pulumi.Input[str]]:
         """
-        IPsec Encript algorithm.
+        the encryption algorithm that is used in Phase 2 negotiations. Valid values: aes, aes192, aes256, des, and 3des. Default value: aes.
         """
         return pulumi.get(self, "ipsec_enc_alg")
 
@@ -534,7 +552,7 @@ class ConnectionIpsecConfigArgs:
     @pulumi.getter(name="ipsecLifetime")
     def ipsec_lifetime(self) -> Optional[pulumi.Input[int]]:
         """
-        IPsec lifetime.
+        the SA lifetime that is determined by Phase 2 negotiations. Unit: seconds. Valid values: 0 to 86400. Default value: 86400.
         """
         return pulumi.get(self, "ipsec_lifetime")
 
@@ -546,7 +564,7 @@ class ConnectionIpsecConfigArgs:
     @pulumi.getter(name="ipsecPfs")
     def ipsec_pfs(self) -> Optional[pulumi.Input[str]]:
         """
-        DH Group.
+        the DH key exchange algorithm that is used in Phase 2 negotiations. Valid values: disabled, group1, group2, group5, and group14. Default value: group2.
         """
         return pulumi.get(self, "ipsec_pfs")
 
@@ -928,12 +946,14 @@ if not MYPY:
         ike_version: NotRequired[pulumi.Input[str]]
         local_id: NotRequired[pulumi.Input[str]]
         """
-        The local Id.
+        The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel.
+        LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
         """
         psk: NotRequired[pulumi.Input[str]]
         remote_id: NotRequired[pulumi.Input[str]]
         """
-        Remote ID.
+        The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel.
+        RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
         """
 elif False:
     ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -951,8 +971,10 @@ class ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs:
                  psk: Optional[pulumi.Input[str]] = None,
                  remote_id: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] local_id: The local Id.
-        :param pulumi.Input[str] remote_id: Remote ID.
+        :param pulumi.Input[str] local_id: The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel.
+               LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
+        :param pulumi.Input[str] remote_id: The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel.
+               RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
         """
         if ike_auth_alg is not None:
             pulumi.set(__self__, "ike_auth_alg", ike_auth_alg)
@@ -1031,7 +1053,8 @@ class ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs:
     @pulumi.getter(name="localId")
     def local_id(self) -> Optional[pulumi.Input[str]]:
         """
-        The local Id.
+        The identifier of the tunnel on the Alibaba Cloud side, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the tunnel.
+        LocalId supports fully qualified domain names (FQDNs). If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
         """
         return pulumi.get(self, "local_id")
 
@@ -1052,7 +1075,8 @@ class ConnectionTunnelOptionsSpecificationTunnelIkeConfigArgs:
     @pulumi.getter(name="remoteId")
     def remote_id(self) -> Optional[pulumi.Input[str]]:
         """
-        Remote ID.
+        The identifier of the tunnel peer, which is used in Phase 1 negotiations. It can contain at most 100 characters. The default value is the IP address of the customer gateway that is associated with the tunnel.
+        RemoteId supports FQDNs. If you use an FQDN, we recommend that you set the negotiation mode to aggressive.
         """
         return pulumi.get(self, "remote_id")
 

pulumi_alicloud/vpn/connection.py

@@ -44,8 +44,6 @@ class ConnectionArgs:
         :param pulumi.Input[Sequence[pulumi.Input[str]]] local_subnets: The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] remote_subnets: The CIDR block of the local data center. This parameter is used for phase-two negotiation.
         :param pulumi.Input[str] vpn_gateway_id: The ID of the VPN gateway.
-               
-               The following arguments will be discarded. Please use new fields as soon as possible:
         :param pulumi.Input[bool] auto_config_route: Whether to configure routing automatically. Value:
                - **true**: Automatically configure routes.
                - **false**: does not automatically configure routes.
@@ -132,8 +130,6 @@ class ConnectionArgs:
     def vpn_gateway_id(self) -> pulumi.Input[str]:
         """
         The ID of the VPN gateway.
-
-        The following arguments will be discarded. Please use new fields as soon as possible:
         """
         return pulumi.get(self, "vpn_gateway_id")
 
@@ -378,8 +374,6 @@ class _ConnectionState:
         :param pulumi.Input[Sequence[pulumi.Input['ConnectionTunnelOptionsSpecificationArgs']]] tunnel_options_specifications: The tunnel options of IPsec. See `tunnel_options_specification` below.
         :param pulumi.Input[str] vpn_connection_name: The name of the IPsec-VPN connection.
         :param pulumi.Input[str] vpn_gateway_id: The ID of the VPN gateway.
-               
-               The following arguments will be discarded. Please use new fields as soon as possible:
         """
         if auto_config_route is not None:
             pulumi.set(__self__, "auto_config_route", auto_config_route)
@@ -677,8 +671,6 @@ class _ConnectionState:
     def vpn_gateway_id(self) -> Optional[pulumi.Input[str]]:
         """
         The ID of the VPN gateway.
-
-        The following arguments will be discarded. Please use new fields as soon as possible:
         """
         return pulumi.get(self, "vpn_gateway_id")
 
@@ -730,19 +722,24 @@ class Connection(pulumi.CustomResource):
         if spec is None:
             spec = "5"
         default = alicloud.vpn.get_gateway_zones(spec="5M")
-        default_get_networks = alicloud.vpc.get_networks(name_regex="^default-NODELETING$",
-            cidr_block="172.16.0.0/16")
-        default0 = alicloud.vpc.get_switches(vpc_id=default_get_networks.ids[0],
+        default_network = alicloud.vpc.Network("default",
+            cidr_block="172.16.0.0/16",
+            vpc_name=name)
+        default0 = alicloud.vpc.Switch("default0",
+            cidr_block="172.16.0.0/24",
+            vpc_id=default_network.id,
             zone_id=default.ids[0])
-        default1 = alicloud.vpc.get_switches(vpc_id=default_get_networks.ids[0],
+        default1 = alicloud.vpc.Switch("default1",
+            cidr_block="172.16.1.0/24",
+            vpc_id=default_network.id,
             zone_id=default.ids[1])
         h_a__vpn = alicloud.vpn.Gateway("HA-VPN",
             vpn_type="Normal",
-            disaster_recovery_vswitch_id=default1.ids[0],
+            disaster_recovery_vswitch_id=default1.id,
             vpn_gateway_name=name,
-            vswitch_id=default0.ids[0],
+            vswitch_id=default0.id,
             auto_pay=True,
-            vpc_id=default_get_networks.ids[0],
+            vpc_id=default_network.id,
             network_type="public",
             payment_type="Subscription",
             enable_ipsec=True,
@@ -858,8 +855,6 @@ class Connection(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[Union['ConnectionTunnelOptionsSpecificationArgs', 'ConnectionTunnelOptionsSpecificationArgsDict']]]] tunnel_options_specifications: The tunnel options of IPsec. See `tunnel_options_specification` below.
         :param pulumi.Input[str] vpn_connection_name: The name of the IPsec-VPN connection.
         :param pulumi.Input[str] vpn_gateway_id: The ID of the VPN gateway.
-               
-               The following arguments will be discarded. Please use new fields as soon as possible:
         """
         ...
     @overload
@@ -886,19 +881,24 @@ class Connection(pulumi.CustomResource):
         if spec is None:
             spec = "5"
         default = alicloud.vpn.get_gateway_zones(spec="5M")
-        default_get_networks = alicloud.vpc.get_networks(name_regex="^default-NODELETING$",
-            cidr_block="172.16.0.0/16")
-        default0 = alicloud.vpc.get_switches(vpc_id=default_get_networks.ids[0],
+        default_network = alicloud.vpc.Network("default",
+            cidr_block="172.16.0.0/16",
+            vpc_name=name)
+        default0 = alicloud.vpc.Switch("default0",
+            cidr_block="172.16.0.0/24",
+            vpc_id=default_network.id,
             zone_id=default.ids[0])
-        default1 = alicloud.vpc.get_switches(vpc_id=default_get_networks.ids[0],
+        default1 = alicloud.vpc.Switch("default1",
+            cidr_block="172.16.1.0/24",
+            vpc_id=default_network.id,
             zone_id=default.ids[1])
         h_a__vpn = alicloud.vpn.Gateway("HA-VPN",
             vpn_type="Normal",
-            disaster_recovery_vswitch_id=default1.ids[0],
+            disaster_recovery_vswitch_id=default1.id,
             vpn_gateway_name=name,
-            vswitch_id=default0.ids[0],
+            vswitch_id=default0.id,
             auto_pay=True,
-            vpc_id=default_get_networks.ids[0],
+            vpc_id=default_network.id,
             network_type="public",
             payment_type="Subscription",
             enable_ipsec=True,
@@ -1122,8 +1122,6 @@ class Connection(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[Union['ConnectionTunnelOptionsSpecificationArgs', 'ConnectionTunnelOptionsSpecificationArgsDict']]]] tunnel_options_specifications: The tunnel options of IPsec. See `tunnel_options_specification` below.
         :param pulumi.Input[str] vpn_connection_name: The name of the IPsec-VPN connection.
         :param pulumi.Input[str] vpn_gateway_id: The ID of the VPN gateway.
-               
-               The following arguments will be discarded. Please use new fields as soon as possible:
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1322,8 +1320,6 @@ class Connection(pulumi.CustomResource):
     def vpn_gateway_id(self) -> pulumi.Output[str]:
         """
         The ID of the VPN gateway.
-
-        The following arguments will be discarded. Please use new fields as soon as possible:
         """
         return pulumi.get(self, "vpn_gateway_id")