forked from docs/doc-exports
gtema
72909318a9
Reviewed-by: Goncharov, Artem <artem.goncharov@t-systems.com> Co-authored-by: gtema <artem.goncharov@gmail.com> Co-committed-by: gtema <artem.goncharov@gmail.com>
57 lines
7.1 KiB
HTML
57 lines
7.1 KiB
HTML
<a name="css_01_0076"></a><a name="css_01_0076"></a>
|
|
|
|
<h1 class="topictitle1">Public Network Access</h1>
|
|
<div id="body0000001282179474"><p id="css_01_0076__p14399174919919">You can access a cluster that has the security mode enabled through the public IP address provided by the system.</p>
|
|
<div class="note" id="css_01_0076__note1151134111378"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="css_01_0076__p12151104111376">If public access is enabled for CSS, then EIP and bandwidth resources will be used and billed.</p>
|
|
</div></div>
|
|
<div class="section" id="css_01_0076__section1638913302523"><h4 class="sectiontitle">Configuring Public Network Access</h4><ol id="css_01_0076__ol1346120407506"><li id="css_01_0076__li154611240175011">Log in to the <span id="css_01_0076__text115093190244">CSS</span> management console.</li><li id="css_01_0076__li10902641195015">On the <strong id="css_01_0076__b2267115594811">Create Cluster</strong> page, enable <strong id="css_01_0076__b18111194135518">Security Mode</strong>.<p id="css_01_0076__p591094814219">You can enable <strong id="css_01_0076__b1284113955619">Security Mode</strong> for clusters in Version 6.5.4 and later versions.</p>
|
|
</li><li id="css_01_0076__li0180112411579">Select <strong id="css_01_0076__b52176551438">Automatically assign</strong> for <strong id="css_01_0076__b3673111514416">Public IP Address</strong> and set related parameters.<div class="p" id="css_01_0076__p13954203019">
|
|
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="css_01_0076__table138801874019" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Public network access parameters</caption><thead align="left"><tr id="css_01_0076__row1888010718010"><th align="left" class="cellrowborder" valign="top" width="23.830000000000002%" id="mcps1.3.3.2.3.3.1.2.3.1.1"><p id="css_01_0076__p28805717017">Parameter</p>
|
|
</th>
|
|
<th align="left" class="cellrowborder" valign="top" width="76.17%" id="mcps1.3.3.2.3.3.1.2.3.1.2"><p id="css_01_0076__p78801371205">Description</p>
|
|
</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody><tr id="css_01_0076__row17880271203"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.3.2.3.3.1.2.3.1.1 "><p id="css_01_0076__p38801710019">Bandwidth</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.3.2.3.3.1.2.3.1.2 "><p id="css_01_0076__p98801171002">Bandwidth of the public network access</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0076__row18880197202"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.3.2.3.3.1.2.3.1.1 "><p id="css_01_0076__p108801179017">Access Control</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.3.2.3.3.1.2.3.1.2 "><p id="css_01_0076__p168801175012">If you disable access control, all IP addresses can access the cluster through the public IP address. If you enable access control, only IP addresses in the whitelist can access the cluster through the public IP address.</p>
|
|
</td>
|
|
</tr>
|
|
<tr id="css_01_0076__row2088013718014"><td class="cellrowborder" valign="top" width="23.830000000000002%" headers="mcps1.3.3.2.3.3.1.2.3.1.1 "><p id="css_01_0076__p20880127602">Whitelist</p>
|
|
</td>
|
|
<td class="cellrowborder" valign="top" width="76.17%" headers="mcps1.3.3.2.3.3.1.2.3.1.2 "><p id="css_01_0076__p9880275012">IP address or IP address range allowed to access a cluster. Use commas (,) to separate multiple addresses.</p>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
</div>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0076__section18851031541"><h4 class="sectiontitle">Managing Public Network Access</h4><p id="css_01_0076__p2871748088">You can configure, modify, view the public network access of, or disassociate the public IP address from a cluster.</p>
|
|
<ol id="css_01_0076__ol179019266146"><li id="css_01_0076__li7625635121410">Log in to the <span id="css_01_0076__text1762514356145">CSS</span> management console.</li><li id="css_01_0076__li106254357143">On the <span class="wintitle" id="css_01_0076__wintitle803835227104550"><b>Clusters</b></span> page that is displayed, click the name of the target cluster.<div class="p" id="css_01_0076__p1995471316211"><ul id="css_01_0076__ul2615124316115"><li id="css_01_0076__li86151943141116">Configuring public network access<p id="css_01_0076__p16141643121114"><a name="css_01_0076__li86151943141116"></a><a name="li86151943141116"></a>If you do not configure the public network access during cluster creation, you can configure it on the <strong id="css_01_0076__b1672803516515">Basic Information</strong> page after configuring the cluster.</p>
|
|
<p id="css_01_0076__p10615104331113">Click <strong id="css_01_0076__b10111186185514">Associate</strong> next to <strong id="css_01_0076__b46841030115517">Public IP Address</strong>, set the access bandwidth, and click <strong id="css_01_0076__b5241046185514">OK</strong>.</p>
|
|
<p id="css_01_0076__p2615144321117">If the association fails, wait for several minutes and try again.</p>
|
|
</li></ul>
|
|
<ul id="css_01_0076__ul1461534319119"><li id="css_01_0076__li196151143111114">Modifying public network access<p id="css_01_0076__p17615154381118"><a name="css_01_0076__li196151143111114"></a><a name="li196151143111114"></a>For a cluster for which you have configured public network access, you can click <strong id="css_01_0076__b07989296279">Edit</strong> next to <strong id="css_01_0076__b132681411315">Bandwidth</strong> to modify the bandwidth, or you can click <strong id="css_01_0076__b6143152183112">Set</strong> next to <strong id="css_01_0076__b269183912312">Access Control</strong> to set the access control function and the whitelist for access.</p>
|
|
</li><li id="css_01_0076__li1361516431116">Viewing public network access<p id="css_01_0076__p3615184381118"><a name="css_01_0076__li1361516431116"></a><a name="li1361516431116"></a>On the <strong id="css_01_0076__b1771565534414">Basic Information</strong> page, you can view the public IP address associated with the current cluster.</p>
|
|
</li><li id="css_01_0076__li106151143201118">Disassociating a public IP address from a cluster<p id="css_01_0076__p146155436110"><a name="css_01_0076__li106151143201118"></a><a name="li106151143201118"></a>To disassociate the public IP address, click <strong id="css_01_0076__b615153014719">Disassociate</strong> next to <strong id="css_01_0076__b189482040154714">Public IP Address</strong>.</p>
|
|
</li></ul>
|
|
</div>
|
|
</li></ol>
|
|
</div>
|
|
<div class="section" id="css_01_0076__section2022235142517"><h4 class="sectiontitle">Accessing a Cluster Through the Public IP Address</h4><p id="css_01_0076__p1243345415167">After configuring the public IP address, you can use it to access the cluster. The access address is <strong id="css_01_0076__b922352845412">https://</strong><strong id="css_01_0076__b22231628125418"><em id="css_01_0076__i770312294509">public IP address</em></strong><strong id="css_01_0076__b1222402818547">:9200/</strong><strong id="css_01_0076__b1122414286548"><em id="css_01_0076__i1220984395310">interface URL</em></strong>.</p>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="css_01_0009.html">Managing Elasticsearch Clusters</a></div>
|
|
</div>
|
|
</div>
|
|
|