| cgw_description | The description of the VPN customer gateway instance. | string | false | |
| cgw_id | The customer gateway id used to connect with vpn gateway. | string | false | |
| cgw_ip_address | The IP address of the customer gateway. | string | false | |
| cgw_name | The name of the VPN customer gateway. Defaults to null. | string | false | |
| ike_auth_alg | The authentication algorithm of phase-one negotiation. Valid value: md5 | sha1. Default value: sha1. | string | false |
| ike_enc_alg | The encryption algorithm of phase-one negotiation. Valid value: aes | aes192 | aes256 | des |
| ike_lifetime | The SA lifecycle as the result of phase-one negotiation. The valid value of n is [0, 86400], the unit is second and the default value is 86400. | number | false | |
| ike_local_id | The identification of the VPN gateway. | string | false | |
| ike_mode | The negotiation mode of IKE V1. Valid value: main (main mode) | aggressive (aggressive mode). Default value: main. | string | false |
| ike_pfs | The Diffie-Hellman key exchange algorithm used by phase-one negotiation. Valid value: group1 | group2 | group5 | group14 |
| ike_remote_id | The identification of the customer gateway. | string | false | |
| ike_version | The version of the IKE protocol. Valid value: ikev1 | ikev2. Default value: ikev1. | string | false |
| ipsec_auth_alg | The authentication algorithm of phase-two negotiation. Valid value: md5 | sha1. Default value: sha1. | string | false |
| ipsec_connection_name | The name of the IPsec connection. | string | false | |
| ipsec_effect_immediately | Whether to delete a successfully negotiated IPsec tunnel and initiate a negotiation again. Valid value:true,false. | bool | false | |
| ipsec_enc_alg | The encryption algorithm of phase-two negotiation. Valid value: aes | aes192 | aes256 | des |
| ipsec_lifetime | The SA lifecycle as the result of phase-two negotiation. The valid value is [0, 86400], the unit is second and the default value is 86400. | number | false | |
| ipsec_local_subnet | The CIDR block of the VPC to be connected with the local data center. This parameter is used for phase-two negotiation. | list(string) | false | |
| ipsec_pfs | The Diffie-Hellman key exchange algorithm used by phase-two negotiation. Valid value: group1 | group2 | group5 | group14 |
| ipsec_remote_subnet | The CIDR block of the local data center. This parameter is used for phase-two negotiation. | list(string) | false | |
| psk | Used for authentication between the IPsec VPN gateway and the customer gateway. | string | false | |
| region | (Deprecated from version 1.2.0) The region used to launch this module resources. | string | false | |
| ssl_cipher | The encryption algorithm used by the SSL-VPN server. Valid value: AES-128-CBC (default) | AES-192-CBC | AES-256-CBC | none. |
| ssl_client_cert_names | The names of the client certificates. | list(string) | false | |
| ssl_client_ip_pool | The CIDR block from which access addresses are allocated to the virtual network interface card of the client. | string | false | |
| ssl_compress | Specify whether to compress the communication. Valid value: true (default) | false. | bool | false |
| ssl_local_subnet | The CIDR block to be accessed by the client through the SSL-VPN connection. | string | false | |
| ssl_port | The port used by the SSL-VPN server. The default value is 1194.The following ports cannot be used: [22, 2222, 22222, 9000, 9001, 9002, 7505, 80, 443, 53, 68, 123, 4510, 4560, 500, 4500]. | number | false | |
| ssl_protocol | The protocol used by the SSL-VPN server. Valid value: UDP(default) | TCP. | string | false |
| ssl_vpn_server_name | The name of the SSL-VPN server. | string | false | |
| vpc_id | The VPN belongs the vpc_id, the field can't be changed. | string | false | |
| vpn_bandwidth | The value should be 10, 100, 200, 500, 1000 if the user is postpaid, otherwise it can be 5, 10, 20, 50, 100, 200, 500, 1000. | number | false | |
| vpn_charge_type | The charge type for instance. Valid value: PostPaid, PrePaid. Default to PostPaid. | string | false | |
| vpn_description | The description of the VPN instance. | string | false | |
| vpn_enable_ipsec | Enable or Disable IPSec VPN. At least one type of VPN should be enabled. | bool | false | |
| vpn_enable_ssl | Enable or Disable SSL VPN. At least one type of VPN should be enabled. | bool | false | |
| vpn_name | Name of the VPN gateway. | string | false | |
| vpn_period | The filed is only required while the InstanceChargeType is prepaid. | number | false | |
| vpn_ssl_connections | The max connections of SSL VPN. Default to 5. This field is ignored when enable_ssl is false. | number | false | |
| writeConnectionSecretToRef | The secret which the cloud resource connection will be written to | writeConnectionSecretToRef | false | |