Skip to content

Network Summary

Wiesław Kielas edited this page Dec 1, 2015 · 3 revisions

TAP network summary

Machines

No IAM roles are used by any machines.

4 machines have public IP addresses: nat, cdh-launcher, bastion and public_haproxy_z1.

Machines use either Ubuntu AMI images (Cloud Foundry deployment) or RHEL 6.5 (all other machines.

Helper machines

name type AZ subnet
cdh-launcher t2.small us-west-2a bastion
bastion t2.small us-west-2a bastion
consul-master-0 t2.micro us-west-2a CDH
consul-master-1 t2.micro us-west-2a CDH
consul-master-2 t2.micro us-west-2a CDH
nat t2.small us-west-2a bastion

Cloud Foundry deployment

name type AZ subnet info
api_z1/0 c3.large us-west-2a cf1
api_z2/0 c3.large us-west-2b cf2 only in HA
backbone_z1/0 m3.large us-west-2a cf1
backbone_z2/0 m3.large us-west-2b cf2 only in HA
bosh-vpc-8fce85ea m3.medium us-west-2a bosh
data/0 m3.large us-west-2a cf1
docker/0 m3.large us-west-2a docker
health_z1/0 c3.large us-west-2a cf1
health_z2/0 c3.large us-west-2b cf2 only in HA
private_haproxy_z1/0 c3.large us-west-2a lb
public_haproxy_z1/0 c3.large us-west-2a lb
runner_z1/0 m3.xlarge us-west-2a cf1
runner_z1/1 m3.xlarge us-west-2a cf1
runner_z2/0 m3.xlarge us-west-2b cf2 only in HA
runner_z2/1 m3.xlarge us-west-2b cf2 only in HA
services_z1/0 c3.large us-west-2a cf1
services_z2/0 c3.large us-west-2b cf2 only in HA

CDH deployment

name type AZ subnet
cdh-master-0 m3.xlarge us-west-2a CDH
cdh-master-1 m3.xlarge us-west-2a CDH
cdh-master-2 m3.xlarge us-west-2a CDH
cdh-worker-0 m3.xlarge us-west-2a CDH
cdh-worker-1 m3.xlarge us-west-2a CDH
cdh-worker-2 m3.xlarge us-west-2a CDH

Inbound and outbound traffic

Outbound traffic

This in the inbound traffic filter in the NAT security group on the NAT instance.

port type
80/tcp HTTP
123/udp NTP
443/tcp HTTPS
465/tcp SMTPS
11371/tcp HKP for gnupg keys

Inbound traffic

This in the inbound traffic filter in the CF security group on the haproxy instance.

port type
22/tcp SSH
80/tcp HTTP
443/tcp HTTPS
4443/tcp Websocket connections

Subnets

name CIDR
bastion 10.10.0.0/24
bosh 10.10.1.0/24
lb 10.10.2.0/24
cf1 10.10.3.0/24
cf2 10.10.4.0/24
docker 10.10.5.0/24
CDH 10.10.10.0/24
Clone this wiki locally