Hub-spoke topology with Azure Firewall.

Copy the .auto.tfvars from the template:

cp config/sample.tfvars .auto.tfvars

Get your public IP address and add it to the home_ips variable. This will be used for DNAT:

dig +short myip.opendns.com @resolver1.opendns.com

Create the infrastructure:

terraform init
terraform apply -auto-approve

Check the policy rules to interact with the solution components.

Threat intelligence will be executed first in the policy lifecycle.

Firewall policy rule types will be processed in the following order:

1. DNAT
2. Network
3. Application

terraform destroy -auto-approve