feat(website): Internet resource migration blogpost (#8150)

This is an announcement we will be linking to.

elixir/apps/web/lib/web/live/sites/index.ex

@@ -253,7 +253,7 @@ defmodule Web.Sites.Index do
             ACTION REQUIRED: Please migrate your existing Internet Resource to this Site before <strong>March 15, 2025</strong>.
           </p>
           <p class="mb-8 text-sm">
-            <.website_link path="/blog/internet-resource-migration">
+            <.website_link path="/blog/migrate-your-internet-resource">
               Read more about why this is necessary.
             </.website_link>
           </p>

website/public/images/blog/migrate-your-internet-resource/migrate-internet-resource.svg

@@ -0,0 +1,20 @@
+<svg width="44" height="44" viewBox="0 0 44 44" fill="none" xmlns="http://www.w3.org/2000/svg">
+<g filter="url(#filter0_i_1537_857)">
+<rect width="44" height="44" rx="2" fill="#1B140E"/>
+<path d="M13.6077 10.747V14.497M4.30473 17.873C3.43873 19.373 4.52173 21.247 6.25273 21.247H20.9627C22.6927 21.247 23.7757 19.373 22.9107 17.873L15.5567 5.125C14.6907 3.625 12.5247 3.625 11.6587 5.125L4.30473 17.873ZM13.6077 17.497H13.6147V17.505H13.6077V17.497Z" stroke="#FF7300" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+<path d="M31 40C32.995 39.9999 34.9335 39.3372 36.511 38.116C38.0886 36.8948 39.2159 35.1843 39.716 33.253M31 40C29.005 39.9999 27.0665 39.3372 25.489 38.116C23.9114 36.8948 22.7841 35.1843 22.284 33.253M31 40C33.485 40 35.5 35.97 35.5 31C35.5 26.03 33.485 22 31 22M31 40C28.515 40 26.5 35.97 26.5 31C26.5 26.03 28.515 22 31 22M39.716 33.253C39.901 32.533 40 31.778 40 31C40.0025 29.4521 39.6039 27.93 38.843 26.582M39.716 33.253C37.0492 34.7314 34.0492 35.5048 31 35.5C27.838 35.5 24.867 34.685 22.284 33.253M22.284 33.253C22.0948 32.517 21.9993 31.76 22 31C22 29.395 22.42 27.887 23.157 26.582M31 22C32.5962 21.9993 34.1639 22.4234 35.5422 23.2286C36.9205 24.0338 38.0597 25.1912 38.843 26.582M31 22C29.4038 21.9993 27.8361 22.4234 26.4578 23.2286C25.0795 24.0338 23.9403 25.1912 23.157 26.582M38.843 26.582C36.6657 28.4679 33.8805 29.5041 31 29.5C28.002 29.5 25.26 28.4 23.157 26.582" stroke="#5E00D6" stroke-width="1.5" stroke-linecap="round" stroke-linejoin="round"/>
+</g>
+<defs>
+<filter id="filter0_i_1537_857" x="0" y="0" width="44" height="44" filterUnits="userSpaceOnUse" color-interpolation-filters="sRGB">
+<feFlood flood-opacity="0" result="BackgroundImageFix"/>
+<feBlend mode="normal" in="SourceGraphic" in2="BackgroundImageFix" result="shape"/>
+<feColorMatrix in="SourceAlpha" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 127 0" result="hardAlpha"/>
+<feMorphology radius="1" operator="erode" in="SourceAlpha" result="effect1_innerShadow_1537_857"/>
+<feOffset/>
+<feGaussianBlur stdDeviation="1"/>
+<feComposite in2="hardAlpha" operator="arithmetic" k2="-1" k3="1"/>
+<feColorMatrix type="matrix" values="0 0 0 0 1 0 0 0 0 0.945098 0 0 0 0 0.898039 0 0 0 0.25 0"/>
+<feBlend mode="normal" in2="shape" result="effect1_innerShadow_1537_857"/>
+</filter>
+</defs>
+</svg>

website/src/app/blog/migrate-your-internet-resource/_page.tsx

@@ -0,0 +1,18 @@
+"use client";
+import Post from "@/components/Blog/Post";
+import Content from "./readme.mdx";
+import gravatar from "@/lib/gravatar";
+
+export default function _Page() {
+  return (
+    <Post
+      authorName="Jamil Bou Kheir"
+      authorTitle="Founder"
+      authorAvatarSrc={gravatar("jamil@firezone.dev")}
+      title="Migrate Your Internet Resource by March 15, 2024"
+      date="2024-02-16"
+    >
+      <Content />
+    </Post>
+  );
+}

website/src/app/blog/migrate-your-internet-resource/page.tsx

@@ -0,0 +1,12 @@
+import { Metadata } from "next";
+import _Page from "./_page";
+
+export const metadata: Metadata = {
+  title: "Migrate Your Internet Resource • Firezone Blog",
+  description:
+    "Migrate Your Internet Resource by March 15, 2024 • Firezone Blog",
+};
+
+export default function Page() {
+  return <_Page />;
+}

website/src/app/blog/migrate-your-internet-resource/readme.mdx

@@ -0,0 +1,60 @@
+import Image from "next/image";
+
+<Image
+  src="/images/blog/migrate-your-internet-resource/migrate-internet-resource.svg"
+  alt="Migrate your Internet Resource"
+  width={200}
+  height={200}
+  className="mx-auto shadow rounded"
+/>
+
+---
+
+## tl;dr
+
+We're making a change to the way the [Internet Resource](/kb/deploy/resources#the-internet-resource) works in Firezone to improve security and performance. Beginning **March 15, 2024**, the Internet Resource will exist exclusively in a new Site dedicated to routing Internet traffic.
+
+<Image
+  src="/images/blog/migrate-your-internet-resource/button.png"
+  alt="Migrate your Internet Resource button"
+  className="mx-auto rounded"
+  height={250}
+  width={250}
+/>
+
+**Action Required:** If you're currently using the Internet Resource, deploy at least one Gateway in the new Internet Site and then click the orange `Migrate Internet Resource` button on the `Sites` page to migrate your existing Internet Resource to the Internet Site.
+
+If you're not using the Internet Resource, <strong>no action is required</strong>.
+
+## Why the change?
+
+The Internet Resource provides full-route tunneling for traffic that doesn't match any other Resource in your account. This is useful when you want to ensure all traffic is routed through Firezone, but it can also be a security risk if not properly configured.
+
+Consider the case where the Internet Resource lives in a Site with other Resources. Because the Internet Resource (by definition) matches all traffic, any actor in your account with access to the Internet Resource would also by default have access to all other Resources in that Site. If you had no other mechanism to limit traffic from the Gateway(s) in the Site to those Resources, you could inadvertently grant access to protected Resources you didn't intend to.
+
+## What's changing?
+
+The Internet Resource will now exist in a dedicated Internet Site that only contains the Internet Resource. This means that the Internet Resource will no longer be able to route traffic to other Resources in your account. This change will be enforced beginning **March 15, 2024**.
+
+This also means you'll need to deploy dedicated Gateway(s) to the Internet Site to handle traffic for the Internet Resource. This ensures Internet-bound traffic is properly isolated from other Resources in your account.
+
+## What do I need to do?
+
+If you're using the Internet Resource, perform the following steps:
+
+1. [Sign in](https://app.firezone.dev/) to the admin portal.
+1. Click `Sites` in the sidebar.
+1. Scroll down and click the `Manage Internet Site` button.
+1. Deploy at least one Gateway in the Internet Site, and make sure it's connected.
+1. Head back to `Sites`.
+1. Click the orange `Migrate Internet Resource` button to your Internet Resource to the Internet Site.
+
+That's it! Your Internet Resource is now migrated to the Internet Site.
+
+## What if I don't migrate?
+
+If you don't migrate your Internet Resource to the Internet Site by **March 15, 2024**, it will be migrated automatically after that date. Unless you have deployed Gateway(s) in the Internet Site, this will result in a loss of connectivity for any actors using the Internet Resource.
+
+## Questions?
+
+If you have any questions or need assistance with this change, please reach out to our [support team](/support).

website/src/app/blog/posts.tsx

@@ -11,6 +11,22 @@ import { Badge } from "@/components/Badges";
 export default function Posts() {
   const [filters, setFilters] = useState("All Posts");
   const posts = [
+    {
+      title: "Migrate your Internet Resource by March 15, 2024",
+      date: "February 16, 2024",
+      href: "/blog/migrate-your-internet-resource",
+      authorName: "Jamil Bou Kheir",
+      authorAvatarSrc: gravatar("jamil@firezone.dev"),
+      type: "Announcement",
+      src: "/images/blog/migrate-your-internet-resource/migrate-internet-resource.svg",
+      description: (
+        <p className="mb-2">
+          We're making some changes to the way Internet Resources work to
+          improve security and performance. Migrate your Internet Resources by
+          <strong>March 15, 2024</strong> to avoid any interruptions.
+        </p>
+      ),
+    },
     {
       title: "September 2024 update",
       date: "September 2, 2024",

website/src/app/kb/deploy/resources/readme.mdx

@@ -138,13 +138,18 @@ other Resource.
 </Alert>
 
 The Internet Resource is automatically enabled on Team and Enterprise plans. To
-use it, follow these steps:
+use it, head to the main `Sites` section in the admin portal, and look for the
+`Manage Internet Resource` in the section at the bottom of the page.
 
-1. Find the `Internet` Resource in the Resources section of the admin portal.
-   Edit it, and make sure it has at least one Site assigned to it.
-1. [Create a Policy](/kb/deploy/policies) using the Internet Resource.
-1. In the client app, remember to enable the Internet Resource by selecting
-   `Enable this resource` in the Resource list.
+This will take you to the Internet Site, a special system-managed Site dedicated
+to hosting the Internet Resource. Here you can deploy Gateways and manage
+Policies like any other Site.
+
+<Alert color="info">
+  <strong>Tip:</strong> Deploy geographically-dispersed Gateways to the Internet
+  Site to provide lower latency for a remote workforce. Firezone automatically
+  selects the closest Gateway to route traffic through.
+</Alert>
 
 <NextStep href="/kb/deploy/groups">Next: Create Groups</NextStep>