TCP targets

1. Log in to Boundary.
2. Select an org, and then select the project where you want to create a target.
3. Select Targets under Project Actions.
4. Click New Target.
5. Complete the following fields:
   • Name: (Required) A name for identification purposes, such as tcp-target. The name must be unique.
   • Description: (Optional) An optional description of the target for identification purposes.
   • Type: (Required) Select TCP to create a TCP target.
   • Target Address (Optional) If you are not using host catalogs and host sets, you can enter a target address instead to map the target to a single address. This must be a valid IP address or DNS name.
   • Default Port (Required) The default port on which to connect, such as 22 for an SSH connection.
   • Aliases (Optional) A unique identifier for the target, which makes the target easier to connect to using the CLI or transparent sessions. To create an alias, complete the following fields, and then click Add:
     • Select scope: Select the scope in which to create the alias. You must create org and project suffixes before you can create an alias in the target's project scope. Otherwise, you can only create the alias in the global scope. Refer to Create a suffix for a scope for more information.
     • Alias value: Enter the string that you want to use as the alias to represent the target. An alias's value can be a hostname or a DNS-like string.
6. Click Save.

1. Log in to Boundary.

2. Set the BOUNDARY_PROJECT_ID environment variable, or provide the scope ID (such as p_1234567890) in the next step.

3. Use the following command to create a TCP target named tcp-target with a direct target address of 10.0.0.10 and a default connection port of 99:

   $ boundary targets create tcp \
     -scope-id $BOUNDARY_PROJECT_ID \
     -name "tcp-target" \
     -address "10.0.0.10" \
     -default-port 99
   

   You must provide the scope-id field when you create a static host catalog.

   You can use any of the following attributes when you create a TCP target:

   • -description=<string> - Specifies the optional description of the target that you want to use for identification purposes.

   • -name=<string> - Specifies the optional name you want to use to describe the target for identification purposes.

   • -scope-id=<string> - Scope in which to create the target. The default is global. You can also specify the scope using the BOUNDARY_SCOPE_ID environment variable.

   • -address=<string> - An optional valid network address for the target to connect to. You cannot use an address alongside host sources.

   • -default-client-port=<string> - The default client port on the target.

   • -default-port=<string> - The default port on the target. If you do not specify a default port, Boundary uses port 22.

   • -egress-worker-filter=<string> - A Boolean expression that filters which egress workers can process sessions for the target.

   • -ingress-worker-filter=<string> - A Boolean expression that filters which ingress workers can process sessions for the target.

   • -session-connection-limit=<string> - The maximum number of connections allowed for a session. A value of -1 means the connections are unlimited.

   • -session-max-seconds=<string> - The maximum lifetime of the session, including all connections. You can specify an integer number of seconds or a duration string. If you do not specify a maximum duration, Boundary uses the default value of 8 hours (28800 seconds).

   • -with-alias-authorize-session-host-id=<string> - The host ID that an alias uses to authorize sessions for the target.

   • -with-alias-scope-id=<string> - The scope ID that you want to create the alias in at target creation time. The default is global. You can create aliases in the global and project scopes.

     You must create org and project suffixes before you can create an alias in the target's project scope. Otherwise, you can only create the alias in the global scope. Refer to Create a suffix for a scope for more information.

   • -with-alias-value=<string> - The value of the alias that you want to use to represent the target. Use this parameter to create the alias and target, and associate them with each other, at the same time.

     If you are creating an alias for a target that resides in a project scope, you must append the org and project suffixes to the value using the format alias.projectsuffix.orgsuffix. The value must comply with DNS naming rules.

You can define a target and target alias using the Boundary Terraform provider:

resource "boundary_target" "tcp_target" {
  name         = "tcp-test"
  description  = "Generic TCP target for testing"
  type         = "tcp"
  address      = "10.0.0.10"
  default_port = "99"
  scope_id     = boundary_scope.project.id
}