Configuring Public Network Access

• An NAT gateway and EIP are required to enable public network access for a Logstash cluster. They must be purchased additionally and be in the same region as the Logstash cluster.
• The SNAT rule added to the NAT gateway applies only to resources in the specified subnet. Make sure you use the subnet of the Logstash cluster.

1. Obtain the VPC and subnet of the Logstash cluster for configuring an NAT gateway later.
   1. Log in to the CSS management console.
   2. In the navigation pane on the left, choose Clusters > Logstash.
   3. In the cluster list, click the name of the target cluster. The cluster information page is displayed.
   4. Click the Overview tab. In the Network Information area, record the cluster's VPC and subnet information.

2. Create a public NAT gateway for the Logstash cluster. For details, see NAT Gateway User Guide.

   Table 1 describes the key parameters. Set other parameters based on service requirements.

   Table 1 Configuring a public NAT gateway

   Parameter	Description
   Region	Use the region of the Logstash cluster.
   Specifications	Select a value based on the needed bandwidth. The maximum number of connections supported by SNAT varies depending on the specifications you choose.
   VPC	Select the VPC recorded in 1.
   Subnet	Select the subnet recorded in 1.

3. Add SNAT rules on the NAT gateway to allow the Logstash cluster to access the public network through a shared EIP on the gateway. For details, see section "Adding an SNAT Rule" in NAT Gateway User Guide.

   Table 2 describes the key parameters. Set other parameters based on service requirements.

   Table 2 Adding an SNAT rule

   Parameter	Description
   Scenario	Select VPC.
   CIDR Block	Select Existing, and then select the VPC recorded in 1.
   Public IP Address Type	Select EIP, and then select an IP address that meets your requirements. If no EIP is available, click View EIP to go to the EIP console and . You are advised to configure the EIP as follows: Billing Mode: Pay-per-use Billed By: Traffic

Configure a return route for the Logstash cluster to make sure the Logstash nodes can connect to the IP addresses of data sources on the public network. The return route must cover all these IP addresses.

1. Log in to the CSS management console.
2. In the navigation pane on the left, choose Clusters > Logstash.
3. In the cluster list, click the name of the target cluster. The cluster information page is displayed.
4. On the Overview tab, click Add Route under Cluster Route in the Network Information area.
5. In the displayed dialog box, configure the route information.

   Table 3 Adding a route

   Parameter	Description
   IP Address	Enter the IP address (or a CIDR block) of a data source, for example, 10.10.1.0. If the IP addresses of data sources are scattered, configure multiple routes for them.
   Subnet Mask	Enter the subnet mask used with the IP address. The subnet mask must align with the network part of the IP address. That is: The network bits (the 1s) of the subnet mask must encompass those of the IP address. The host bits (the 0s) of the subnet mask must accommodate the IP address's host bits. The subnet mask should not cover too wide a range, avoiding unnecessary IP address exposure or waste of the address space. 255.255.255.0 (that is, /24) is recommended, which applies to most internal networking scenarios.

6. Click OK to add the route.

   After the route is added, click View Route to check the route information. You can click Add Route to add another route; or click Delete Route to delete one—In the Delete Route dialog box, select a route, enter DELETE manually, and then click OK.

Test the connectivity between the Logstash cluster and the data sources.

1. Log in to the CSS management console.
2. In the navigation pane on the left, choose Clusters > Logstash.
3. In the cluster list, click the name of the target cluster. The cluster information page is displayed.
4. Select the Configuration Center tab, and click Test Connectivity.
5. In the Test Connectivity dialog box, enter the IP address and port number of a data source, and click Test.

   If Available is displayed, the network between the Logstash cluster and the data source is connected.

   Note

   You can test a maximum of 10 IP addresses at a time. Click Add to add multiple IP addresses and click Test at the bottom to test connectivity to all these IP addresses at the same time.