Skip to content
This repository was archived by the owner on Nov 19, 2024. It is now read-only.

Commit 8b68151

Browse files
committed
Update from feedback
1 parent 19e7bb4 commit 8b68151

File tree

1 file changed

+20
-15
lines changed

1 file changed

+20
-15
lines changed

src/cloud/project/privatelink-service.md

Lines changed: 20 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -59,26 +59,31 @@ Enabling PrivateLink can take up to _five_ business days. Providing incomplete o
5959
- **Customer Cloud account number** (AWS or Azure)–Must be in the same region as the {{site.data.var.ece}} instance
6060
- **Cloud region**–Provide the Cloud region where the account is hosted for verification purposes
6161
- **Services and communication ports**–Adobe must open ports to enable service communication between VPCs, for example _Webserver, HTTP port 80_, _SFTP port 2222_
62-
- **Project ID**–Provide the {{site.data.var.ece}} Pro project ID. You can get the Project ID and other project information using the following [Magento Cloud CLI][] command: `magento-cloud project:info`
62+
- **Project ID**–Provide the {{site.data.var.ece}} Pro project ID. You can get the Project ID and other project information using the following [Magento Cloud CLI][] command: `magento-cloud project:info`
6363
- **Connection type**–Specify unidirectional or bidirectional for connection type
6464
- **Endpoint service**–For bidirectional PrivateLink connections, provide the DNS URL for the VPC endpoint service that Adobe must connect to, for example: `com.amazonaws.vpce.<cloud-region>.vpce-svc-<service-id>`
6565
- **Endpoint service access granted**-Provide the Adobe account principal with access to this endpoint service: `arn:aws:iam::402592597372:root`
6666

6767
{:.bs-callout-warning}
6868
If access to the endpoint service is not provided, then the bidirectional PrivateLink connection to the service in your VPC is **not** added, which delays the setup.
6969

70-
Additional prerequisites for Azure enablement:
70+
Additional prerequisites for Azure Private Link enablement:
7171

72-
- {:.fix}A list of cluster ID numbers intended for Azure Private Link set up
73-
- {:.fix}To connect to the cluster, you need:
74-
- A list of ports on the cluster to expose to the new external Private Endpoint
75-
- The Azure subscription ID for the Private Endpoint connection
76-
- {:.fix}To connect the cluster to an external service, you need:
77-
- The external Private Link service ID, which looks similar to the following:
72+
- {:.fix}The cluster ID; using SSH, log in to the remote and use the command: `cat /etc/platform_cluster`
7873

79-
```text
80-
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/privateLinkServices/{svcNameID}
81-
```
74+
- {:.fix}For an external service to connect to your {{site.data.var.ee}} Pro cluster, you need:
75+
76+
- A list of ports on your Pro cluster to expose to the new external Private Endpoint
77+
78+
- A list of Azure subscription IDs for the Private Endpoint connections
79+
80+
- {:.fix}To connect your {{site.data.var.ee}} Pro cluster to an external service, you need:
81+
82+
- A list of resource IDs for the target services. External Private Link service IDs look similar to the following:
83+
84+
```text
85+
/subscriptions/{subscriptionId}/resourceGroups/{resourceGroupName}/providers/Microsoft.Network/privateLinkServices/{svcNameID}
86+
```
8287

8388
### Enablement workflow
8489

@@ -173,21 +178,21 @@ To test the connection to the VPC endpoint service:
173178
1. Verify the service is listening on VM.
174179

175180
```bash
176-
netstat -na |grep <port>
181+
netstat -na | grep <port>
177182
```
178183

179184
1. Check the packages flow.
180185

181186
```bash
182-
tcpdump -i <ethernet interface> -tt -nn port <destination port> and host <source host>
187+
tcpdump -i <ethernet-interface> -tt -nn port <destination-port> and host <source-host>
183188
```
184189

185190
Check the following internal settings to ensure that the configuration is valid:
186191

187192
- Endpoint and endpoint services settings
188193
- NLB settings
189194
- The target groups in NLB and verify they are healthy
190-
- The netcat/curl endpoint URL from each VM ( listed above)
195+
- The netcat/curl endpoint URL from each VM (listed above)
191196

192197
See the following articles for help with troubleshooting connection issues:
193198

@@ -219,7 +224,7 @@ If these resources are not available in the customer VPC, you must sign into you
219224

220225
See your Cloud platform documentation for PrivateLink set up instructions:
221226

222-
- **AWS PrivateLink documentation**
227+
- **AWS PrivateLink documentation**
223228
- [Create a Network Load Balancer][]
224229
- [Create an endpoint service configuration][]
225230
- [Create an interface endpoint][]

0 commit comments

Comments
 (0)