Skip to content

Feature to disable default 0.0.0.0/0 route for public subnets #1187

@HasseJohansen

Description

@HasseJohansen

Is your request related to a new offering from AWS?

This feature is not bound to a specific AWS feature(other than used by the VPC module already)

Is your request related to a problem? Please describe.

When using network firewall we need to be able to have a default route through the network firewall for our public subnets

As the VPC today always creates the 0.0.0.0/0 route (and also creates the route table for the public subnets). We have no way to use the this VPC module with a network firewall

Describe the solution you'd like.

I think the simplest solution with least change is to be able to disable the creation of the default route for public subnets

Describe alternatives you've considered.

The alternative I considered first was having a toggle to disable creating the route table(s) for public subnets and then provide "my own" route table(s)

Additional context

Would this be an ok approach?

Activity

HasseJohansen

HasseJohansen commented on May 12, 2025

@HasseJohansen
Author

I have made a PR here #1188

github-actions

github-actions commented on Jun 12, 2025

@github-actions

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

HasseJohansen

HasseJohansen commented on Jun 12, 2025

@HasseJohansen
Author

Hi. I still think this is useful feature. I would like to have it merged. I can see that there is a PR which disables the routable creation also(#1190). That can also help in my usecase, but I was going for the smallest change for my requirement

Hope you will consider it

springroll12

springroll12 commented on Jun 13, 2025

@springroll12

This small PR would be a huge improvement to this module.

github-actions

github-actions commented on Jul 14, 2025

@github-actions

This issue has been automatically marked as stale because it has been open 30 days
with no activity. Remove stale label or comment or this issue will be closed in 10 days

HasseJohansen

HasseJohansen commented on Jul 14, 2025

@HasseJohansen
Author

Please react to the PR instead of letting the bot autoclosing it

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

      Development

      No branches or pull requests

        Participants

        @HasseJohansen@springroll12

        Issue actions

          Feature to disable default 0.0.0.0/0 route for public subnets · Issue #1187 · terraform-aws-modules/terraform-aws-vpc