Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.rafftechnologies.com/llms.txt

Use this file to discover all available pages before exploring further.

Updated May 10, 2026 Manages a Raff VPC — a private network that VMs in the same project and region can attach to and reach each other on internal IPs. CIDR is immutable once created; rename and description update in place.

Example — minimal

resource "raff_vpc" "prod" {
  name   = "prod-services"
  cidr   = "10.7.0.0/24"
  region = "us-east"
}

Example — with description

resource "raff_vpc" "prod" {
  name        = "prod-services"
  cidr        = "10.7.0.0/16"
  region      = "us-east"
  description = "Shared private network for the production tier"
}

Argument reference

Required

ArgumentTypeDescription
namestringVPC name. Updates rename in place
cidrstringCIDR block. RFC 1918 (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) or RFC 6598 (100.64.0.0/10). Allowed prefix lengths: /16 to /28. ForceNew

Optional

ArgumentTypeDescription
regionstringRegion. Defaults to us-east. ForceNew
descriptionstringFree-form description

Attribute reference (computed)

AttributeDescription
idVPC UUID
account_id / project_idOwning account / project UUIDs
gatewayGateway IP for the VPC
gateway_typeGateway type
dnsDNS server IP
router_public_ipPublic IP of the VPC router (for outbound traffic)
router_statusRouter lifecycle status
statusVPC lifecycle status
total_ipsTotal addressable IPs in the CIDR
used_ipsIPs currently in use
created_at / updated_atRFC3339 timestamps

Lifecycle

OperationBehavior
terraform apply (create)Creates the VPC and its router
Change name, descriptionIn-place update
Change cidr, regionReplacement — destroy + recreate
terraform destroyDeletes the VPC. Fails if VMs are still attached — detach them first

Importing existing VPCs

terraform import raff_vpc.prod <vpc-uuid>

Permissions

The API key needs vpc.create, vpc.manage, and vpc.delete in the project. The system role Project Admin grants all of these.

Data sources

# Single VPC by UUID
data "raff_vpc" "prod" {
  id = "<vpc-uuid>"
}

# All VPCs in the current project
data "raff_vpcs" "all" {}

raff_vm

Attach VMs via vpc_id.

raff_security_group

Firewall rules for VPC traffic.

CLI: raff vpc

Imperative equivalent.
Last modified on May 11, 2026