Hi,
We're trying to set up a VPC/nTier-App such that a single VM (call it a
management node) outside the VPC has ssh access to the VM's inside the
VPC. (And to do this for multiple VPC's, same mgmt node.) What's the
best way to implement this?
It seems like #754 [1] would be the right way to go about this when
available (is that right?) but already there are a few things we could
do now:
- set up an extra public IP on each tier with careful port forwarding
and ACL restricted to the mgmt node
- use an s2s vpn where the other "site" is just the mgmt node
- use a shared network, seems supported based on #748 [2] (but this
would break isolation?)
Any thoughts on these or others?
TIA,
Alex
[1] https://issues.apache.org/jira/browse/CLOUDSTACK-754
[2] https://issues.apache.org/jira/browse/CLOUDSTACK-748