raff_vpc - Raff

_{Updated May 10, 2026} Manages a Raff VPC — a private network that VMs in the same project and region can attach to and reach each other on internal IPs. CIDR is immutable once created; rename and description update in place.

Example — minimal

resource "raff_vpc" "prod" {
  name   = "prod-services"
  cidr   = "10.7.0.0/24"
  region = "us-east"
}

Example — with description

resource "raff_vpc" "prod" {
  name        = "prod-services"
  cidr        = "10.7.0.0/16"
  region      = "us-east"
  description = "Shared private network for the production tier"
}

Argument reference

Required

Argument	Type	Description
`name`	string	VPC name. Updates rename in place
`cidr`	string	CIDR block. RFC 1918 (`10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`) or RFC 6598 (`100.64.0.0/10`). Allowed prefix lengths: `/16` to `/28`. ForceNew

Optional

Argument	Type	Description
`region`	string	Region. Defaults to `us-east`. ForceNew
`description`	string	Free-form description

Attribute reference (computed)

Attribute	Description
`id`	VPC UUID
`account_id` / `project_id`	Owning account / project UUIDs
`gateway`	Gateway IP for the VPC
`gateway_type`	Gateway type
`dns`	DNS server IP
`router_public_ip`	Public IP of the VPC router (for outbound traffic)
`router_status`	Router lifecycle status
`status`	VPC lifecycle status
`total_ips`	Total addressable IPs in the CIDR
`used_ips`	IPs currently in use
`created_at` / `updated_at`	RFC3339 timestamps

Lifecycle

Operation	Behavior
`terraform apply` (create)	Creates the VPC and its router
Change `name`, `description`	In-place update
Change `cidr`, `region`	Replacement — destroy + recreate
`terraform destroy`	Deletes the VPC. Fails if VMs are still attached — detach them first

Importing existing VPCs

terraform import raff_vpc.prod <vpc-uuid>

Permissions

The API key needs vpc.create, vpc.manage, and vpc.delete in the project. The system role Project Admin grants all of these.

Data sources

# Single VPC by UUID
data "raff_vpc" "prod" {
  id = "<vpc-uuid>"
}

# All VPCs in the current project
data "raff_vpcs" "all" {}

raff_vm

Attach VMs via vpc_id.

raff_security_group

Firewall rules for VPC traffic.

CLI: raff vpc

Imperative equivalent.

​Example — minimal

​Example — with description

​Argument reference

​Required

​Optional

​Attribute reference (computed)

​Lifecycle

​Importing existing VPCs

​Permissions

​Data sources

​Related