amazon-vpc | 易学教程

Kubernetes container connection to RDS instance in separate VPC

阅读更多关于 Kubernetes container connection to RDS instance in separate VPC

问题 I have a Kubernetes cluster running in Amazon EC2 inside its own VPC, and I'm trying to get Dockerized services to connect to an RDS database (which is in a different VPC). I've figured out the peering and routing table entries so I can do this from the minion machines: ubuntu@minion1:~$ psql -h <rds-instance-name> Password: So that's all working. The problem is that when I try to make that connection from inside a Kubernetes-managed container, I get a timeout: ubuntu@pod-1234:~$ psql -h <rds

ERROR 2005 (HY000): Unknown MySQL server host in aws

阅读更多关于 ERROR 2005 (HY000): Unknown MySQL server host in aws

问题 I have created an e-commerce site in angular js. And I need to host the same in amazon web service. So inorder to host the same I created an ec2 instance first. Now after that added an rds instance with a security group of VPC by allowing all ip's as outbound and inbound. While creating security group I specified for mysql and for all connection. Still after I remotely loged into the instance and try to connect to the end point from rds instance using mysql -u username -p password -h ********

AWS Application in Private EC2 and HTTP traffic

阅读更多关于 AWS Application in Private EC2 and HTTP traffic

问题 I have an application running in an EC2 instance in a private subnet (to add extra security), receiving traffic directly from an internet-facing NLB that is associated to the public subnet. I have also configured a NAT Gateway in the public subnet so that the private EC2 instance can download whatever needed from the Internet. I have just come out to the next conclusion: If I request from the Internet: http://index.html The private EC2 Instance uses the NAT Gateway to send back the HTTP

How to properly connect AWS Lambda to RDS in VPC?

阅读更多关于 How to properly connect AWS Lambda to RDS in VPC?

I am trying to build a graphQL API with Serverless Framework on AWS-Lambda using Apollo-Server-Lambda etc. I need to use a not publicly available PostgreSQL RDS instance. I can get lambdas up and running and sending back requests when not in VPC. I can get a Postgres RDS Database up and running and connected to PgAdmin (when in publicly available mode). The problem is once I make the RDS Postgres 'non public' and try to get all these pieces talking together I fail. I have tried multitude of different approaches. This is regularly portrayed as magic. It is wonderfully written https://gist

What is the correct syntax for filtering by tag in describe-vpcs?

阅读更多关于 What is the correct syntax for filtering by tag in describe-vpcs?

问题 I am trying to understand a aws ec2 cli call. I am looking to describe all VPC then filer on a custom tag (vpcname=myvpc, however after trying multiple combinations I keep getting conflicting errors about the format and use of --filters. using as a reference [http://docs.aws.amazon.com/cli/latest/reference/ec2/describe-vpcs.html][1] aws --profile myProfile --region eu-west-1 ec2 describe-vpcs --filters vpcname,myvpc however this returns Error parsing parameter '--filters': should be: Key

Assigning Static IP Address to AWS Load Balancer

阅读更多关于 Assigning Static IP Address to AWS Load Balancer

问题 How can I assign a static IP address to a ELB. Seems like I cannot. Some articles online asks to create a Route 53 record but this requires changing CNAME of domain which also redirect email traffic. I just want to change A record not CNAME. Some articles also mention that I can use a EC2 instance as a reverse proxy. But will a single proxy be able to handle a lot of traffic? Any solution for this? 回答1: AWS' Elastic Load Balancer is actually elastic on two levels as described here: http:/

How should a .dockercfg file be hosted in a Mesosphere-on-AWS setup so that only Mesosphere can use it?

阅读更多关于 How should a .dockercfg file be hosted in a Mesosphere-on-AWS setup so that only Mesosphere can use it?

We have set up a test cluster with Mesosphere on AWS, in a private VPC. We have some Docker images which are public, which are easy enough to deploy. However most of our services are private images, hosted on the Docker Hub private plan, and require authentication to access. Mesosphere is capable of private registry authentication, but it achieves this in a not-exactly-ideal way: a HTTPS URI to a .dockercfg file needs to be specified in all Mesos/Marathon task definitions. As the title suggests, the question is basically: how should the .dockercfg file be hosted within AWS so that access may

SSH freely inside AWS VPC

阅读更多关于 SSH freely inside AWS VPC

问题 How do I configure my EC2 machines inside a VPC to be able to ssh without password or key between them? What i'm trying to do is access one machine (which has a public IP) and from this machine access all others freely. Is it even possible? 回答1: Firstly all the machines in your VPC need to be set up to accept the key from your local machine - it's up to you whether you distribute this manually, or use an automated tool such as Chef to do this for you. Next you need to run an ssh-agent on your

How to setup Application Load Balancer for Elastic Beanstalk in AWS

阅读更多关于 How to setup Application Load Balancer for Elastic Beanstalk in AWS

I'm trying to create a new ElasticBeanstalk application with an Application Load Balancer. I'm calling the following commands: $ mkdir HelloWorld $ cd HelloWorld $ eb init $ echo "Hello World" > index.html $ eb create dev-env --elb-type application Output of the last command results in this error: Creating application version archive "app-170821_175709". Uploading HelloWorld/app-170821_175709.zip to S3. This may take a while. Upload Complete. ERROR: Configuration validation exception: Invalid option value: 'null' (Namespace: 'aws:ec2:vpc', OptionName: 'ELBSubnets'): Specify the subnets for the

Cant connect to internet facing ELB from instance in VPC

阅读更多关于 Cant connect to internet facing ELB from instance in VPC

问题 I have a V2 ELB that is internet facing. It routes requests to instances in VPC just fine when I connect to it from my laptop. However when I try to connect to it from another instance inside the same VPC the Security Group firewall rules block the connection. The only way I can get the instances in VPC to connec to the ELB is by opening the https port (443) to the world. What am I doing wrong? The ELB (https://elb.domain.com) has the following attrs: Internet facing, V2 (not classic ELB) VPC