forked from docs/doc-exports
Wuwan, Qi
050b395397
Reviewed-by: Kacur, Michal <michal.kacur@t-systems.com> Co-authored-by: Wuwan, Qi <wuwanqi1@noreply.gitea.eco.tsi-dev.otc-service.com> Co-committed-by: Wuwan, Qi <wuwanqi1@noreply.gitea.eco.tsi-dev.otc-service.com>
58 lines
9.8 KiB
HTML
58 lines
9.8 KiB
HTML
<a name="css_01_0076"></a><a name="css_01_0076"></a>
|
|
|
|
<h1 class="topictitle1">Accessing a Cluster from a Public Network</h1>
|
|
<div id="body1568692028995"><p id="css_01_0076__en-us_topic_0000001223434408_p14399174919919">You can access a security cluster (Elasticsearch clusters in version 6.5.4 or later support the security mode) that has the HTTPS access enabled through the public IP address provided by the system.</p>
|
|
<p id="css_01_0076__en-us_topic_0000001223434408_p121981211103915">By default, CSS uses a shared load balancer for public network access. You can use a dedicated load balancer to improve performance. For details about its configuration, see <a href="css_01_0181.html">Connecting to a Dedicated Load Balancer</a>.</p>
|
|
<div class="note" id="css_01_0076__en-us_topic_0000001223434408_note1151134111378"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_01_0076__en-us_topic_0000001223434408_p12151104111376">If public network access is enabled for CSS, then EIP and bandwidth resources will be used and billed.</p>
|
|
</div></div>
|
|
<div class="section" id="css_01_0076__en-us_topic_0000001223434408_section1638913302523"><h4 class="sectiontitle">Configuring Public Network Access</h4><ol id="css_01_0076__en-us_topic_0000001223434408_ol1346120407506"><li id="css_01_0076__en-us_topic_0000001223434408_li154611240175011">Log in to the <span id="css_01_0076__en-us_topic_0000001223434408_text115093190244">CSS</span> management console.</li><li id="css_01_0076__en-us_topic_0000001223434408_li10902641195015">On the <strong id="css_01_0076__b2267115594811">Create Cluster</strong> page, enable <strong id="css_01_0076__b18111194135518">Security Mode</strong>. Set the administrator password and enable HTTPS access.</li><li id="css_01_0076__en-us_topic_0000001223434408_li0180112411579">Select <strong id="css_01_0076__b52176551438">Automatically assign</strong> for <strong id="css_01_0076__b3673111514416">Public IP Address</strong> and set related parameters.
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0076__en-us_topic_0000001223434408_table138801874019" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Public network access parameters</caption><thead align="left"><tr id="css_01_0076__en-us_topic_0000001223434408_row1888010718010"><th align="left" class="cellrowborder" valign="top" width="23.830000000000002%" id="mcps1.3.4.2.3.3.2.3.1.1"><p id="css_01_0076__en-us_topic_0000001223434408_p28805717017">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="76.17%" id="mcps1.3.4.2.3.3.2.3.1.2"><p id="css_01_0076__en-us_topic_0000001223434408_p78801371205">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="css_01_0076__en-us_topic_0000001223434408_row17880271203"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.3.3.2.3.1.1 "><p id="css_01_0076__en-us_topic_0000001223434408_p38801710019">Bandwidth</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.3.3.2.3.1.2 "><p id="css_01_0076__en-us_topic_0000001223434408_p98801171002">Bandwidth for accessing Kibana with the public IP address</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0076__en-us_topic_0000001223434408_row18880197202"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.3.3.2.3.1.1 "><p id="css_01_0076__en-us_topic_0000001223434408_p108801179017">Access Control</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.3.3.2.3.1.2 "><p id="css_01_0076__en-us_topic_0000001223434408_p168801175012">If you disable this function, all IP addresses can access the cluster through the public IP address. If you enable access control, only IP addresses in the whitelist can access the cluster through the public IP address.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0076__en-us_topic_0000001223434408_row2088013718014"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.4.2.3.3.2.3.1.1 "><p id="css_01_0076__en-us_topic_0000001223434408_p20880127602">Whitelist</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.4.2.3.3.2.3.1.2 "><p id="css_01_0076__en-us_topic_0000001223434408_p9880275012">IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses. This parameter can be configured only when <strong id="css_01_0076__b36731595374">Access Control</strong> is enabled.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0076__en-us_topic_0000001223434408_section18851031541"><h4 class="sectiontitle">Managing Public Network Access</h4><p id="css_01_0076__en-us_topic_0000001223434408_p2871748088">You can configure, modify, view the public network access of, or disassociate the public IP address from a cluster.</p>
|
|
<ol id="css_01_0076__en-us_topic_0000001223434408_ol179019266146"><li id="css_01_0076__en-us_topic_0000001223434408_li7625635121410">Log in to the <span id="css_01_0076__en-us_topic_0000001223434408_text1762514356145">CSS</span> management console.</li><li id="css_01_0076__en-us_topic_0000001223434408_li106254357143">On the <span class="wintitle" id="css_01_0076__wintitle803835227104550"><b>Clusters</b></span> page, click the name of the target cluster. On the <strong id="css_01_0076__b472203816382">Basic Information</strong> page that is displayed, manage the public network access configurations.<ul id="css_01_0076__en-us_topic_0000001223434408_ul2615124316115"><li id="css_01_0076__en-us_topic_0000001223434408_li86151943141116">Configuring public network access<p id="css_01_0076__en-us_topic_0000001223434408_p16141643121114"><a name="css_01_0076__en-us_topic_0000001223434408_li86151943141116"></a><a name="en-us_topic_0000001223434408_li86151943141116"></a>If you enabled HTTPS but did not configure the public network access during security cluster creation, you can configure it on the <strong id="css_01_0076__b1992163710402">Basic Information</strong> page after configuring the cluster.</p>
|
|
<p id="css_01_0076__en-us_topic_0000001223434408_p10615104331113">Click <strong id="css_01_0076__b10111186185514">Associate</strong> next to <strong id="css_01_0076__b46841030115517">Public IP Address</strong>, set the access bandwidth, and click <strong id="css_01_0076__b5241046185514">OK</strong>.</p>
|
|
<p id="css_01_0076__en-us_topic_0000001223434408_p2615144321117">If the association fails, wait for several minutes and try again.</p>
|
|
</li><li id="css_01_0076__en-us_topic_0000001223434408_li196151143111114">Modifying public network access<p id="css_01_0076__en-us_topic_0000001223434408_p17615154381118"><a name="css_01_0076__en-us_topic_0000001223434408_li196151143111114"></a><a name="en-us_topic_0000001223434408_li196151143111114"></a>For a cluster for which you have configured public network access, you can click <strong id="css_01_0076__b07989296279">Edit</strong> next to <strong id="css_01_0076__b132681411315">Bandwidth</strong> to modify the bandwidth, or you can click <strong id="css_01_0076__b6143152183112">Set</strong> next to <strong id="css_01_0076__b269183912312">Access Control</strong> to set the access control function and the whitelist for access.</p>
|
|
</li><li id="css_01_0076__en-us_topic_0000001223434408_li1361516431116">Viewing public network access<p id="css_01_0076__en-us_topic_0000001223434408_p3615184381118"><a name="css_01_0076__en-us_topic_0000001223434408_li1361516431116"></a><a name="en-us_topic_0000001223434408_li1361516431116"></a>On the <strong id="css_01_0076__b1771565534414">Basic Information</strong> page, you can view the public IP address associated with the current cluster.</p>
|
|
</li><li id="css_01_0076__en-us_topic_0000001223434408_li106151143201118">Disassociating a public IP address from a cluster<p id="css_01_0076__en-us_topic_0000001223434408_p146155436110"><a name="css_01_0076__en-us_topic_0000001223434408_li106151143201118"></a><a name="en-us_topic_0000001223434408_li106151143201118"></a>To disassociate the public IP address, click <strong id="css_01_0076__b615153014719">Disassociate</strong> next to <strong id="css_01_0076__b189482040154714">Public IP Address</strong>.</p>
|
|
</li></ul>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0076__en-us_topic_0000001223434408_section2022235142517"><h4 class="sectiontitle">Accessing a Cluster Through the Public IP Address</h4><p id="css_01_0076__en-us_topic_0000001223434408_p5950195234910">After configuring the public IP address, you can use it to access the cluster.</p>
|
|
<div class="p" id="css_01_0076__en-us_topic_0000001223434408_p1243345415167">For example, run the following cURL commands to view the index information in the cluster. In this example, the public access IP address of one node in the cluster is <span class="parmname" id="css_01_0076__parmname15981543155911"><b>10.62.179.32</b></span> and the port number is <span class="parmname" id="css_01_0076__parmname189821543115912"><b>9200</b></span>.<ul id="css_01_0076__en-us_topic_0000001223434408_ul176303506173"><li id="css_01_0076__en-us_topic_0000001223434408_li54972741816">If the cluster you access does not have the security mode enabled, run the following command:<pre class="screen" id="css_01_0076__en-us_topic_0000001223434408_screen1127754132316">curl 'http://10.62.179.32:9200/_cat/indices'</pre>
|
|
</li><li id="css_01_0076__en-us_topic_0000001223434408_li15825521179">If the cluster you access has the security mode enabled, access the cluster using HTTPS and add the username, password and <strong id="css_01_0076__b02507326460">-u</strong> to the cURL command.<pre class="screen" id="css_01_0076__en-us_topic_0000001223434408_screen85820524178">curl -u username:password -k 'https://10.62.179.32:9200/_cat/indices'</pre>
|
|
</li></ul>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0210.html">Accessing an Elasticsearch Cluster</a></div>
|
|
</div>
|
|
</div>
|
|
|