Hello. Thanks for the hint.
This section is already used to allow scalr IPs. You need to configure it
> in config.yml: scalr.aws.ip_pool section. This is list of scalr IP
> addresses that will be whitelisted in SGs, VPC router and other places.
>
My scalr.aws.ip_pool section was configured but it seems that the VPC role
was configured correctly only when I entered the address at the
"whitelisted ips" section in the interface (User Menu -> Security).
It's strange because the "User Menu -> Security" configuration entry seems
to belong to the user domain, not to the farm, and this setting is not
shared across users.
For the record, here is the relevant section in my config.yml file:
aws:
security_group_prefix: ~
ip_pool:
10.100.0.0/16
pma_instance_ip_address: 10.100.0.81
Best Regards,
Jose Juan Montes
>
> On 27 August 2013 12:42, José Juan Montes <[email protected] <javascript:>
> > wrote:
>
>> Hello.
>>
>> I've found that on my installation, VPC router refuses to forward any
>> connection because there are no clients with access to the VPC role "nginx
>> proxy".
>>
>> The template is this:
>> https://github.com/Scalr/cookbooks/blob/master/cookbooks/scalarizr_proxy/templates/default/nginx.conf.erb
>>
>> Is it possible that the following section is missing "allow <%=
>> scalr_addr %>" before the loop:
>>
>> # allowing connections only from known scalr servers
>> <% @scalr_whitelist.each do |addr| -%>
>> allow <%= addr %>;
>> <% end -%>
>> deny all;
>>
>> If this was the case, note that the corresponding recipe would need to be
>> modified to include the parameter as well.
>>
>> I have a question: Where can I configure that whitelist list anyway?
>>
>>
>> --
>> You received this message because you are subscribed to the Google Groups
>> "scalr-discuss" group.
>> To unsubscribe from this group and stop receiving emails from it, send an
>> email to [email protected] <javascript:>.
>> For more options, visit https://groups.google.com/groups/opt_out.
>>
>
>
--
You received this message because you are subscribed to the Google Groups
"scalr-discuss" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
