game-business-zone-service-env.yml

ROSTemplateFormatVersion: '2015-09-01'
Description:
  zh-cn: 构建双地域游戏部署，含VPC、ECS、SLB、RDS、OSS及NAT网关，优化访问速度与数据管理，提升玩家体验与运营效率。
  en: Construct a dual-region game deployment encompassing Virtual Private Cloud (VPC),
    Elastic Compute Service (ECS), Server Load Balancer (SLB), Relational Database
    Service (RDS), Object Storage Service (OSS), and NAT Gateway, to optimize access
    speed and data management, thereby enhancing player experience and operational
    efficiency.
Conditions:
  IsCreateManageEIP:
    Fn::Equals:
    - Ref: CreateManageEnv
    - false
  IsCreateManageEnv:
    Fn::Equals:
    - Ref: CreateManageEnv
    - true
Parameters:
  CreateManageEnv:
    Type: Boolean
    Label:
      en: Create Region 1 Resources and Nat Gateway
      zh-cn: 是否创建地区1资源及Nat网关
    Description:
      en: '<font color=''blue''><b>Refer to the template architecture diagram for
        the environment resources</b></font>，<br>check: <font color=''green''> create
        the locale 1 resource</font><br>Unchecked: <font color=''green''> create area
        2 related resources</font>'
      zh-cn: <font color='blue'><b>环境资源情况请参考模板架构图</b></font>，<br>勾选：<font color='green'>创建地区1相关资源</font><br>未勾选：<font
        color='green'>创建地区2相关资源</font>
    Default: false
  VpcCidrBlock:
    Type: String
    Label:
      en: VPC CIDR Block
      zh-cn: 专有网络网段
    Description:
      en: 'The IP address range of the VPC in the CIDR Block form,<br>you can use
        the following IP address ranges: <br><font color=''green''>[10.0.0.0/8]</font><br><font
        color=''green''>[172.16.0.0/12]</font><br><font color=''green''>[192.168.0.0/16]</font><br><b>note:<font
        color=''blue''>the network segments for creating regions 1 and 2 cannot be
        the same</font></b>'
      zh-cn: 专有网络IP地址段范围，<br>您可以使用以下的IP地址段:<br><font color='green'>[10.0.0.0/8]</font><br><font
        color='green'>[172.16.0.0/12]</font><br><font color='green'>[192.168.0.0/16]</font><br><b>注：<font
        color='blue'>创建地区1和地区2的网段不能相同</font></b>
    Default: 192.168.0.0/16
    AllowedValues:
    - 10.0.0.0/8
    - 172.16.0.0/12
    - 192.168.0.0/16
  VSwitchZoneId:
    Type: String
    Label:
      en: Master Zone
      zh-cn: 主可用区
    Description:
      en: 'Availability Zone ID;<br><b>note: <font color=''blue''>before selecting
        the Available Zone, verify that the Available Zone supports the specification
        for creating SLB、RDS、ECS resources.</font></b>'
      zh-cn: 可用区ID;<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建SLB、RDS、ECS资源的规格。</font></b>
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VswCidrBlock:
    Type: String
    Label:
      en: Master Zone CIDR Block
      zh-cn: 主可用区网段
    Description:
      en: Must be a subnet segment that belongs to a proprietary network and is not
        occupied by another VSwitch.
      zh-cn: 必须是所属专有网络的子网段，并且没有被其他交换机占用。
    Default: 192.168.1.0/24
  VSwitchZoneId2:
    Type: String
    Label:
      en: Slave Zone
      zh-cn: 备可用区
    Description:
      en: 'Availability Zone ID,<br><b>note: <font color=''blue''>before selecting
        the Availability Zone, verify that the available zone supports the specification
        for creating SLB and ECS resources,not the same as Master Zone</font></b>'
      zh-cn: 可用区ID，<br><b>注： <font color='blue'>选择可用区前请确认该可用区是否支持创建SLB和ECS资源的规格,并不同于主可用区</font></b>,
    AssociationProperty: ALIYUN::ECS::Instance:ZoneId
  VswCidrBlock2:
    Type: String
    Label:
      en: Slave Zone CIDR Block
      zh-cn: 备可用区网段
    Description:
      en: Must be a subnet segment that belongs to a proprietary network and is not
        occupied by another VSwitch.
      zh-cn: 必须是所属专有网络的子网段，并且没有被其他交换机占用。
    Default: 192.168.2.0/24
  Bandwidth:
    Type: Number
    Label:
      en: EIP Bandwidth
      zh-cn: EIP带宽
    Description:
      en: The units are Mbps, ranging from 5 to 5000
      zh-cn: 单位为Mbps，范围5~5000。
    Default: 5
    MinValue: 5
    MaxValue: 5000
  EcsInstanceType:
    Type: String
    Label:
      en: Instance Type
      zh-cn: 实例规格
    Description:
      en: 'Fill in the specifications that can be used under the VSwitch availability
        zone;</b></font><br>general specifications：<font color=''red''><b>ecs.g6.xlarge</b></font><br>note:
        a few zones do not support general specifications<br>see detail: <a href=''https://www.alibabacloud.com/help/en/doc-detail/25378.html''
        target=''_blank''><b><font color=''blue''>Instance Specification Family</font></a></b>'
      zh-cn: 填写VSwitch可用区下可使用的规格；<br>通用规格：<font color='red'><b>ecs.g6.xlarge</b></font><br>注：可用区可能不支持通用规格<br>规格详见：<a
        href='https://help.aliyun.com/document_detail/25378.html' target='_blank'><b><font
        color='blue'>实例规格族</font></a></b>
    AssociationProperty: ALIYUN::ECS::Instance::InstanceType
  ECSImageId:
    Type: String
    Label:
      en: Image
      zh-cn: 镜像
    Description:
      en: 'Contact ali cloud engineer to obtain the corresponding game image.<br>[1：<font
        color=''green''>By submitting the work order, ali cloud after-sales service
        engineer shall contact the best practice Owner</font>]<br>[2：<font color=''green''>If
        the enterprise or organization of the user has a CBM/SA follow-up project
        of aliyun, it can also contact the best practice Owner through CBM/SA of aliyun
        to obtain the image</font>]</br>ordinary mirror image,<br>see detail: <b><a
        href=''https://www.alibabacloud.com/help/doc-detail/112977.html'' target=''_blank''><font
        color=''blue''>find the mirror</font></a></b>'
      zh-cn: 联系阿里云工程师获取对应游戏镜像。<br>[方式1：<font color='green'>通过提交工单的方式，由阿里云售后服务工程师联系最佳实践Owner</font>]<br>[方式2：<font
        color='green'>如果使用者所在企业或组织有阿里云CBM/SA跟进项目，也可以通过阿里云CBM/SA联系最佳实践Owner获取镜像</font>]</br>普通镜像，详见：<b><a
        href='https://help.aliyun.com/document_detail/112977.html' target='_blank'><font
        color='blue'>查找镜像</font></a></b>
    Default: centos_7
  SystemDiskCategory:
    Type: String
    Label:
      en: Disk Type
      zh-cn: 磁盘类型
    Description:
      en: '<font color=''blue''><b>Optional values:</b></font><br>[cloud_efficiency:
        <font color=''green''>Efficient Cloud Disk</font>]<br>[cloud_ssd: <font color=''green''>SSD
        Cloud Disk</font>]<br>[cloud_essd: <font color=''green''>ESSD Cloud Disk</font>]<br>[cloud:
        <font color=''green''>Cloud Disk</font>]<br>[ephemeral_ssd: <font color=''green''>Local
        SSD Cloud Disk</font>]'
      zh-cn: '<font color=''blue''><b>可选值：</b></font><br>[cloud_efficiency: <font
        color=''green''>高效云盘</font>]<br>[cloud_ssd: <font color=''green''>SSD云盘</font>]<br>[cloud_essd:
        <font color=''green''>ESSD云盘</font>]<br>[cloud: <font color=''green''>普通云盘</font>]<br>[ephemeral_ssd:
        <font color=''green''>本地SSD盘</font>]'
    Default: cloud_efficiency
    AllowedValues:
    - cloud_efficiency
    - cloud_ssd
    - cloud
    - cloud_essd
    - ephemeral_ssd
  SystemDiskSize:
    Type: Number
    Label:
      en: System Disk Size
      zh-cn: 系统盘大小
    Description:
      en: 'System disk size, range of values: 40-500, units: GB.'
      zh-cn: 系统盘大小, 取值范围：[40, 500], 单位：GB。
    ConstraintDescription:
      en: 'Value range: 40~500. Unit: GB.'
      zh-cn: 取值范围：40~500。单位：GB。
    Default: 40
    MinValue: 40
    MaxValue: 500
  EcsPassword:
    Type: String
    Label:
      en: Instance Password
      zh-cn: 实例密码
    Description:
      en: Server login password, Length 8-30, must contain three(Capital letters,
        lowercase letters, numbers, ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol
        in).
      zh-cn: 服务器登录密码,长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    ConstraintDescription:
      en: Length 8-30, must contain three(Capital letters, lowercase letters, numbers,
        ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ Special symbol in).
      zh-cn: 长度8-30，必须包含三项（大写字母、小写字母、数字、 ()`~!@#$%^&*_-+=|{}[]:;'<>,.?/ 中的特殊符号）。
    AllowedPattern: '[0-9A-Za-z\_\-\&:;''<>,=%`~!@#\(\)\$\^\*\+\|\{\}\[\]\.\?\/]+$'
    MinLength: 8
    MaxLength: 30
    NoEcho: true
  LoadBalancerName:
    Type: String
    Label:
      en: Instance Name
      zh-cn: 实例名称
    Description:
      en: 'Length: 1-80 characters. Can contain Chinese、letters、digits and special
        characters(''-''、''/''、''.''、''_''),<br>note：<font color=''green''>the resource
        is not created when you create locale 2</font>'
      zh-cn: 长度限制为1-80个字符，允许包含中文、字母、数字、'-'、'/'、'.'、'_'这些字符，<br>注意：<font color='green'>创建地区2时不会创建该资源</font>
    Default: slb001
  LoadBalancerSpec:
    Type: String
    Label:
      en: Specifications
      zh-cn: 规格
    Description:
      en: Instance specifications,</br>see detail：</b><a href='https://www.alibabacloud.com/help/doc-detail/85939.html'
        target='_blank'><b><font color='blue'>Performance Support Type</b></font></a>
      zh-cn: 实例规格，</br>详见：</b><a href='https://help.aliyun.com/document_detail/85939.html'
        target='_blank'><b><font color='blue'>性能保障型</b></font></a>
    Default: slb.s1.small
  ListenerPort:
    Type: Number
    Label:
      en: Listening Port
      zh-cn: 监听端口
    Description:
      en: 'Port used by the front end of SLB, valid value: 1~65535.'
      zh-cn: 负载均衡实例前端使用的端口，取值范围：1~65535。
    ConstraintDescription:
      en: 'Port used by the front end of SLB, valid value: 1~65535.'
      zh-cn: 负载均衡实例前端使用的端口，取值范围：1~65535。
    Default: 80
    MinValue: 1
    MaxValue: 65535
  DBInstanceEngineAndVersion:
    Type: String
    Label:
      en: Type And Version
      zh-cn: 类型与版本
    Description:
      en: Database type and version number.
      zh-cn: 数据库类型与版本号。
    Default: MySQL-5.6
    AllowedValues:
    - MySQL-5.5
    - MySQL-5.6
    - MySQL-5.7
    - MySQL-8.0
  DBInstanceClass:
    Type: String
    Label:
      en: Specifications
      zh-cn: 规格
    Description:
      en: 'Select the instance specification based on the type of database engine
        and the available area support;<br>see detail: <a href=''https://www.alibabacloud.com/help/doc-detail/26312.html''
        target=''_blank''><b><font color=''blue''>Instance specification sheet</font></b></a>'
      zh-cn: 根据数据库引擎的类型和可用的区域支持选择实例规格；<br>请参见详细信息：<a href='https://help.aliyun.com/document_detail/26312.html'
        target='_blank'><b><font color='blue'>实例规格表</font></b></a>
    Default: rds.mysql.s2.large
  DBInstanceStorage:
    Type: Number
    Label:
      en: Storage Space
      zh-cn: 存储空间
    Description:
      en: 'Database storage space, unit: GB, increasing every 5GB, valid value: 5-1000.'
      zh-cn: 数据库存储空间, 单位：GB, 每5GB进行递增，取值范围：5-1000。
    ConstraintDescription:
      en: 'Database storage space, unit: GB, increasing every 5GB, valid value: 5-1000.'
      zh-cn: 数据库存储空间, 单位：GB, 每5GB进行递增，取值范围：5-1000。
    Default: 40
    MinValue: 5
    MaxValue: 1000
  DBName:
    Type: String
    Label:
      en: Database Name
      zh-cn: 数据库名称
    Description:
      en: Database name, consisting of lowercase letters, Numbers, and special characters
        (-_), starting with letters, ending with letters or Numbers, up to 64 characters,<br>note:<font
        color='green'>the database name for creating regions 1 and 2 cannot be the
        same</font>
      zh-cn: 数据库名称，由小写字母、数字及特殊字符（-_）组成，以字母开头，字母或数字结尾，最多64个字符,<br>注意：<font color='green'>创建地区1和地区2的数据库名称不能相同</font>
    Default: db_demo_test
  RdsUserName:
    Type: String
    Label:
      en: Database Account
      zh-cn: 数据库账号
    Description:
      en: Consists of lowercase letters, Numbers, and underscores, beginning with
        letters, ending with letters or Numbers, up to 16 characters, and at least
        2 characters,<br>note:<font color='green'>the database account for creating
        regions 1 and 2 cannot be the same</font>
      zh-cn: 由小写字母，数字、下划线组成，以字母开头，字母或数字结尾，最多16个字符，最少2个字符,<br>注意：<font color='green'>创建地区1和地区2的数据库账号不能相同</font>
    Default: demo_test
    MinLength: 2
    MaxLength: 16
  RdsUserType:
    Type: String
    Label:
      en: Account Type
      zh-cn: 账号类型
    Description:
      en: '<b>Database account type, <br><font color=''blue''>allowedValues: </font></b><br>[Normal:
        <font color=''green''>Ordinary account</font>]<br>[Super: <font color=''green''>High-privilege
        account</font>]'
      zh-cn: '<b>数据库账号类型，<br><font color=''blue''>可选值：</font></b><br>[Normal: <font
        color=''green''>普通账号</font>]<br>[Super: <font color=''green''>高权限账号</font>]'
    Default: Normal
    AllowedValues:
    - Super
    - Normal
  RdsUserPassword:
    Type: String
    Label:
      en: Password
      zh-cn: 密码
    Description:
      en: 'The primary account password for the database instance.Large/lowercase
        letters, Numbers and special characters take up three kinds, and the length
        is 8-32 bits. Special characters included! @ # $% ^ & * () _ + - ='
      zh-cn: 数据库实例的主账号密码。大/小写字母、数字、特殊字符占三种，长度8－32位；特殊字符包含!@#$%^&*()_+-=
    AssociationProperty: ALIYUN::RDS::Instance::AccountPassword
    ConstraintDescription:
      en: 'Large/lowercase letters, Numbers and special characters take up three kinds,
        and the length is 8-32 bits. Special characters included! @ # $% ^ & * ()
        _ + - ='
      zh-cn: 大/小写字母、数字、特殊字符占三种，长度8－32位；特殊字符包含!@#$%^&*()_+-=
    MinLength: 8
    MaxLength: 32
    NoEcho: true
  BucketName:
    Type: String
    Label:
      en: Bucket Name
      zh-cn: 存储空间名称
    Description:
      en: The name must be 3 to 63 bytes in length, The name must start and end with
        a lowercase letter or digit.The name can contain only lowercase letters, digits,
        and hyphens (-);<br><b>note：<font color='blue'>a bucket name must be globally
        unique within OSS. Bucket names cannot be changed after the bucket is created.</b></font><br>note：<font
        color='green'>the resources are not created when creating locale 2</font>
      zh-cn: 长度为3~63个字符，必须以小写字母或数字开头和结尾，可以包含小写字母、数字和连字符(-);<br><font color='blue'><b>注：需要全网唯一性，已经存在的不能在创建</b></font><br>注意：<font
        color='green'>创建地区2时不会创建该资源</font>
    Default: static-resource-test-domain
  BucketAccessControl:
    Type: String
    Label:
      en: Access Control
      zh-cn: 读写权限
    Description:
      en: '<font color=''blue''><b>Optional values: </b></font><br>[private：<font
        color=''green''>All access to the file requires authentication</font>]<br>[public-read：<font
        color=''green''>File writes need to be authenticated；Files can be read anonymously</font>]<br>[public-read-write：<font
        color=''green''>Anyone (including anonymous visitors) can perform read and
        write operators on the files in the bucket</font>]'
      zh-cn: '<font color=''blue''><b>可选值: </b></font><br>[private：<font color=''green''>对文件的所有访问操作需要进行身份验证</font>]<br>[public-read：<font
        color=''green''>对文件写操作需要进行身份验证；可以对文件进行匿名读</font>]<br>[public-read-write：<font
        color=''green''>所有人都可以对文件进行读写操作</font>]'
    Default: private
    AllowedValues:
    - private
    - public-read
    - public-read-write
  DomainName:
    Type: String
    Label:
      en: Domain Name
      zh-cn: 域名
    Description:
      en: Domain Name,fill in the applied domain name.
      zh-cn: 域名,填入已申请的域名名称。
  RR:
    Type: String
    Label:
      en: Host Record
      zh-cn: 主机记录
    Description:
      en: Host record, if you want to resolve @.exmaple.com, the host record should
        fill in "@" instead of empty,<br>note:<font color='green'>the host record
        for creating regions 1 and 2 cannot be the same</font>
      zh-cn: 主机记录，如果你想解析@.exmaple.com，主机记录应该填写“@”而不是“空”，<br>注意：<font color='green'>创建地区1和地区2的主机记录不能相同</font>
Resources:
  Vpc:
    Type: ALIYUN::ECS::VPC
    Properties:
      CidrBlock:
        Ref: VpcCidrBlock
      VpcName:
        Fn::Join:
        - '-'
        - - Stack
          - Ref: ALIYUN::StackId
  SecurityGroup:
    Type: ALIYUN::ECS::SecurityGroup
    Properties:
      VpcId:
        Ref: Vpc
      SecurityGroupIngress:
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 22/22
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 80/80
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: tcp
        NicType: intranet
        PortRange: 443/443
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: icmp
        NicType: intranet
        PortRange: -1/-1
        Priority: 1
        SourceCidrIp: 0.0.0.0/0
      - IpProtocol: all
        NicType: intranet
        Policy: drop
        PortRange: -1/-1
        Priority: 10
        SourceCidrIp: 0.0.0.0/0
      Tags:
      - Key: best_practice
        Value: '066'
  VSwitch:
    Type: ALIYUN::ECS::VSwitch
    Properties:
      ZoneId:
        Ref: VSwitchZoneId
      VpcId:
        Ref: Vpc
      CidrBlock:
        Ref: VswCidrBlock
      VSwitchName:
        Fn::Join:
        - '-'
        - - VSwitch
          - Ref: ALIYUN::StackId
  ECS1:
    Type: ALIYUN::ECS::Instance
    Properties:
      ZoneId:
        Ref: VSwitchZoneId
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ECSImageId
      AllocatePublicIP: false
      InstanceType:
        Ref: EcsInstanceType
      InternetChargeType: PayByTraffic
      Password:
        Ref: EcsPassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
      SystemDiskSize:
        Ref: SystemDiskSize
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn: VSwitch
  VSwitch2:
    Type: ALIYUN::ECS::VSwitch
    Condition: IsCreateManageEnv
    Properties:
      ZoneId:
        Ref: VSwitchZoneId2
      VpcId:
        Ref: Vpc
      CidrBlock:
        Ref: VswCidrBlock2
      VSwitchName:
        Fn::Join:
        - '-'
        - - VSwitch2
          - Ref: ALIYUN::StackId
  ECS2:
    Type: ALIYUN::ECS::Instance
    Condition: IsCreateManageEnv
    Properties:
      ZoneId:
        Ref: VSwitchZoneId2
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch2
      SecurityGroupId:
        Ref: SecurityGroup
      ImageId:
        Ref: ECSImageId
      AllocatePublicIP: false
      InstanceType:
        Ref: EcsInstanceType
      InternetChargeType: PayByTraffic
      Password:
        Ref: EcsPassword
      SystemDiskCategory:
        Ref: SystemDiskCategory
      SystemDiskSize:
        Ref: SystemDiskSize
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn: VSwitch2
  SLBLoadBalance:
    Type: ALIYUN::SLB::LoadBalancer
    Condition: IsCreateManageEnv
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      AddressType: intranet
      LoadBalancerName:
        Ref: LoadBalancerName
      LoadBalancerSpec:
        Ref: LoadBalancerSpec
      MasterZoneId:
        Ref: VSwitchZoneId
      SlaveZoneId:
        Ref: VSwitchZoneId2
      Tags:
      - Key: '066'
        Value: best_practice
    DependsOn:
    - VSwitch
    - VSwitch2
    - Vpc
  BackendServerAttachment:
    Type: ALIYUN::SLB::BackendServerAttachment
    Condition: IsCreateManageEnv
    Properties:
      BackendServerList:
      - Ref: ECS1
      - Ref: ECS2
      BackendServerWeightList:
      - 100
      LoadBalancerId:
        Ref: SLBLoadBalance
    DependsOn:
    - ECS1
    - ECS2
    - SLBLoadBalance
  CommonBandwidthPackage:
    Type: ALIYUN::VPC::CommonBandwidthPackage
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      Name:
        Fn::Join:
        - '-'
        - - CommonBandwidthPackage
          - Ref: ALIYUN::StackId
  CommonBandwidthPackageEip:
    Type: ALIYUN::VPC::CommonBandwidthPackageIp
    Condition: IsCreateManageEnv
    Properties:
      BandwidthPackageId:
        Ref: CommonBandwidthPackage
      Eips:
      - AllocationId:
          Fn::GetAtt:
          - EipSLB
          - AllocationId
      - AllocationId:
          Fn::GetAtt:
          - EipNAT
          - AllocationId
      - AllocationId:
          Fn::GetAtt:
          - EipManage
          - AllocationId
  EipSLB:
    Type: ALIYUN::VPC::EIP
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_SLB
          - Ref: ALIYUN::StackId
  DomainRecord:
    Type: ALIYUN::DNS::DomainRecord
    Condition: IsCreateManageEnv
    Properties:
      DomainName:
        Ref: DomainName
      RR:
        Ref: RR
      Type: A
      Value:
        Fn::GetAtt:
        - EipSLB
        - EipAddress
  EipManage:
    Type: ALIYUN::VPC::EIP
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_manage
          - Ref: ALIYUN::StackId
  DomainRecord2:
    Type: ALIYUN::DNS::DomainRecord
    Condition: IsCreateManageEIP
    Properties:
      DomainName:
        Ref: DomainName
      RR:
        Ref: RR
      Type: A
      Value:
        Fn::GetAtt:
        - EipManage
        - EipAddress
  EipAssociationECS:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEIP
    Properties:
      InstanceId:
        Fn::GetAtt:
        - ECS1
        - InstanceId
      AllocationId:
        Fn::GetAtt:
        - EipManage
        - AllocationId
      InstanceType: EcsInstance
  NatGateway:
    Type: ALIYUN::VPC::NatGateway
    Condition: IsCreateManageEnv
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
  EipManageAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - NatGateway
        - NatGatewayId
      AllocationId:
        Fn::GetAtt:
        - EipManage
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  EipNAT:
    Type: ALIYUN::VPC::EIP
    Condition: IsCreateManageEnv
    Properties:
      Bandwidth:
        Ref: Bandwidth
      InternetChargeType: PayByTraffic
      Name:
        Fn::Join:
        - '-'
        - - BEI_EIP_NAT
          - Ref: ALIYUN::StackId
  EipNATAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - NatGateway
        - NatGatewayId
      AllocationId:
        Fn::GetAtt:
        - EipNAT
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  EipSLBAssociation:
    Type: ALIYUN::VPC::EIPAssociation
    Condition: IsCreateManageEnv
    Properties:
      InstanceId:
        Fn::GetAtt:
        - SLBLoadBalance
        - LoadBalancerId
      AllocationId:
        Fn::GetAtt:
        - EipSLB
        - AllocationId
    DependsOn: CommonBandwidthPackageEip
  ForwardEntry1:
    Type: ALIYUN::ECS::ForwardEntry
    Condition: IsCreateManageEnv
    Properties:
      ExternalIp:
        Fn::GetAtt:
        - EipManage
        - EipAddress
      ExternalPort: '10022'
      ForwardTableId:
        Fn::GetAtt:
        - NatGateway
        - ForwardTableId
      InternalIp:
        Fn::GetAtt:
        - ECS1
        - PrivateIp
      InternalPort: '22'
      IpProtocol: TCP
    DependsOn:
    - EipAssociationECS
    - EipManageAssociation
  ForwardEntry2:
    Type: ALIYUN::ECS::ForwardEntry
    Condition: IsCreateManageEnv
    Properties:
      ExternalIp:
        Fn::GetAtt:
        - EipManage
        - EipAddress
      ExternalPort: '20022'
      ForwardTableId:
        Fn::GetAtt:
        - NatGateway
        - ForwardTableId
      InternalIp:
        Fn::GetAtt:
        - ECS2
        - PrivateIp
      InternalPort: '22'
      IpProtocol: TCP
  Listener:
    Type: ALIYUN::SLB::Listener
    Condition: IsCreateManageEnv
    Properties:
      BackendServerPort: 80
      Bandwidth: -1
      ListenerPort:
        Ref: ListenerPort
      LoadBalancerId:
        Ref: SLBLoadBalance
      Persistence:
        StickySession: 'on'
      Protocol: tcp
    DependsOn: SLBLoadBalance
  OssBucket:
    Type: ALIYUN::OSS::Bucket
    Condition: IsCreateManageEnv
    Properties:
      AccessControl:
        Ref: BucketAccessControl
      BucketName:
        Ref: BucketName
      DeletionForce: true
      StorageClass: Standard
      Tags:
        Key: best_practice
        Value: '066'
  RdsDBInstance:
    Type: ALIYUN::RDS::DBInstance
    Properties:
      VpcId:
        Ref: Vpc
      VSwitchId:
        Ref: VSwitch
      DBInstanceClass:
        Ref: DBInstanceClass
      DBInstanceStorage:
        Ref: DBInstanceStorage
      DBMappings:
      - CharacterSetName: utf8
        DBName:
          Ref: DBName
      Engine:
        Fn::Select:
        - '0'
        - Fn::Split:
          - '-'
          - Ref: DBInstanceEngineAndVersion
      EngineVersion:
        Fn::Select:
        - '1'
        - Fn::Split:
          - '-'
          - Ref: DBInstanceEngineAndVersion
      MasterUserPassword:
        Ref: RdsUserPassword
      MasterUserType:
        Ref: RdsUserType
      MasterUsername:
        Ref: RdsUserName
      MultiAZ: true
      SecurityIPList:
        Ref: VpcCidrBlock
      Tags:
        Key: best_practice
        Value: '066'
  SnatEntry:
    Type: ALIYUN::VPC::SnatEntry
    Condition: IsCreateManageEnv
    Properties:
      SourceVSwitchIds:
      - Fn::GetAtt:
        - VSwitch
        - VSwitchId
      - Fn::GetAtt:
        - VSwitch2
        - VSwitchId
      SnatIp:
        Fn::GetAtt:
        - EipNAT
        - EipAddress
      SnatTableId:
        Fn::GetAtt:
        - NatGateway
        - SNatTableId
    DependsOn: EipNATAssociation
Outputs:
  EipAddress:
    Description:
      en: EIP IP
      zh-cn: EIP IP
    Value:
      Fn::GetAtt:
      - EipManage
      - EipAddress
  RdsAccountName:
    Description:
      en: RDS instance data account
      zh-cn: RDS实例数据账号
    Value:
      Ref: RdsUserName
  RdsDBInstanceDBName:
    Description:
      en: name of the RDS database
      zh-cn: RDS数据库名称
    Value:
      Ref: DBName
  RdsInstanceInnerIPAddress:
    Description:
      en: Rds instance database Intranet address connection string
      zh-cn: Rds实例数据库内网地址连接串。
    Value:
      Fn::GetAtt:
      - RdsDBInstance
      - InnerConnectionString
  VpcId:
    Description:
      en: VPC Instance ID
      zh-cn: VPC 实例ID
    Value:
      Fn::GetAtt:
      - Vpc
      - VpcId
Metadata:
  ALIYUN::ROS::Interface:
    ParameterGroups:
    - Parameters:
      - CreateManageEnv
      Label:
        default: ''
    - Parameters:
      - VpcCidrBlock
      - VSwitchZoneId
      - VswCidrBlock
      - VSwitchZoneId2
      - VswCidrBlock2
      - Bandwidth
      Label:
        default: VPC
    - Parameters:
      - EcsInstanceType
      - ECSImageId
      - SystemDiskCategory
      - SystemDiskSize
      - EcsPassword
      Label:
        default: ECS
    - Parameters:
      - LoadBalancerName
      - LoadBalancerSpec
      - ListenerPort
      Label:
        default: SLB
    - Parameters:
      - DBInstanceEngineAndVersion
      - DBInstanceClass
      - DBInstanceStorage
      - DBName
      - RdsUserName
      - RdsUserType
      - RdsUserPassword
      Label:
        default: RDS
    - Parameters:
      - BucketName
      - BucketAccessControl
      Label:
        default: Bucket
    - Parameters:
      - DomainName
      - RR
      Label:
        default: DNS
    TemplateTags:
    - acs:solution:影视娱乐:游戏业务分区合服