Currently, we are using only port 1194, so the rest are for future usage. There are three listeners for VPN (on ports 1194, 1195, 1196) that can be used for the servers inside the Pritunl. The Network Load Balancer (NLB), which is in front of the instances, has five listeners as shown below. To set up the MongoDB URI ( mongodb+srv://pritunl: /pritunl) use the variable (string) mongodb_uri on Terraform. Also check Pritunl documentation for MongoDB Atlas. ![]() After the creation of the MongoDB Atlas, we added Pritunl’s public IPs on the whitelist of the Atlas cluster and we connected to the Atlas cluster locally to create a new database in it called pritunl ( guide on how to connect). Thus, we selected to use MongoDB Atlas as it is cheaper (starts from the free tier) and easier to set up. Next, we deployed two instances and installed and configured a MongoDB cluster, but maintaining and making sure that HA worked effectively was a big overhead. But it was quite expensive, as it starts at $0.28/hr for one db.r5.large instance. Initially, we checked the AWS DocumentDB solution. Then you can provide the list of the ENI IDs with the variable (list) fixed_eni on Terraform. You can manually create two ENIs (we selected the sixth address of each subnet 10.0.0.6 and 10.0.16.6) and attach public IPs to them. This can be achieved by attaching those ENIs as a secondary network interfaces on the instance, as outlined in the appendix below. This is useful when whitelisting those IPs into the Security Groups that Pritunl-VPN needs to access internally, such as our internal GitLab instance. The selection of two ASGs with one instance has been done due to the necessity of having the same Elastic Network Interface (ENI), which results on having the same private and public IPs. The module we wrote can be found here as an example for how to deploy Pritunl. To deploy Pritunl in our infrastructure, we used Terraform. ![]() It hides the complete configuration (user and server management) overhead behind the scenes of the web interface.Its pricing is reasonable for our scale. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |