Creating AWS PrivateLink Connections
AWS Private Link simplifies connectivity of services across different accounts and VPCs so that your data will be shared between services without exposure of data to the public Internet. In addition to AWS VPC peering, Viridian Dedicated provides AWS Private Link connection strategy and in this new strategy, Hazelcast Clusters are like AWS Marketplace Items that you can connect to your own clusters by subscribing them with a couple of clicks via the Hazelcast Viridian console.
AWS PrivateLink Workflow
To connect to a Viridian Dedicated cluster with AWS Private Link, use the following workflow:
-
Enable AWS Private Link for the cluster.
-
Download the CloudFormation template from the console and upload it to your AWS account to create necessary stacks (subscribe to service on Viridian Dedicated privately).
-
Download a preconfigured client from the cluster dashboard and upload it to your machines under VPC/Subnet that you have used during CloudFormation stack creation.
-
Run the client.
Enabling AWS PrivateLink
In order to use AWS Private Link, you need to enable it first. This is because, AWS Private Link uses Network Load Balancer in the background and you don’t want to get extra cost if you will never use it.
After you click Enable AWS Private Link in Manage > AWS PrivateLink popup, you should see it is in progress
You cannot add AWS Private Link connections without enabling AWS Private Link, you need to wait until you see it is enabled. |
Now you can add AWS Private Link connections by following the instructions shown on the screen.
Adding AWS Private Link Connections
Enabling AWS Private Link means we just created a VPC Endpoint Service for you Hazelcast Cluster and now we are ready to subscribe your VPC Endpoints to this service. Since, confidentiality is important in Dedicated, we never collect from data, we provide CloudFormation template instead to execute it in your account in a controlled way. In order to get Cloud Formation template, you can go Manage > AWS PrivateLink and click first Download button. This is the file that contains all the necessary stack creation resources, and you can upload this Cloud Formation screen in your account by clicking Upload button
When you click upload button, you will be redirected to Cloud Formation stack creation page and you can upload yaml file on this screen
VPC and Subnet selection is important here since this details should be related to your instance location that your application is running in. As an example; if you want to connect from your microservice pool to a Viridian Dedicated cluster, you need to specify VPC and Subnet that contains your microservice pool.
In order to eliminate the manual stuff we introduce this Cloud Formation template methodology and you can see it actually also create an AWS Lambda function to automate all VPC Endpoint create and subscribe operation in a controlled way. You can see the entire log inside Cloud Watch
At the end, it will create a VPC Endpoint and will subscribe it to VPC Endpoint Service.
Connecting to Hazelcast Cluster
In order to connect your cluster, you can just go to Connect Your Cluster popup in cluster detail page and download sample project by selecting the proper option in the select box.
What you see in the options is the ID of VPC Endpoint for your account. You need to be careful about this selection if you made multiple connections to the Viridian Dedicated cluster from different sources. |
After you download sample project, you can upload it to an instance that located inside VPC and Subnet that you selected during Cloud Formation stack creation