You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Expand all lines: content/en/docs/control-center/security/private-connectivity/_index.md
+10-6Lines changed: 10 additions & 6 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -6,6 +6,10 @@ description: "Describes the Private Connectivity section in the Mendix Control C
6
6
weight: 30
7
7
---
8
8
9
+
{{% alert color="warning" %}}
10
+
This feature is in Public Beta. For more information, refer to [Release Status](/releasenotes/release-status/).
11
+
{{% /alert %}}
12
+
9
13
## Introduction
10
14
11
15
The **Private Connectivity** page allows you to view and manage your company's Private Connectivity assets: networks, agents, resources, and connections.
@@ -34,22 +38,22 @@ The following sections provide an overview of the components which make up the P
34
38
35
39
### Networks
36
40
37
-
Mendix has an enterprise account with Tailscale. Within the Mendix-owned Tailscale account, Mendix creates a dedicated network for you. You can have multiple networks if you want to, for example, isolate production traffic from non-production traffic.
41
+
Mendix has an enterprise account with Tailscale. Within the Mendix-owned Tailscale account, Mendix creates a dedicated private connectivity network for you. You can have multiple networks if, for example, you want to isolate production traffic from non-production traffic.
38
42
39
43
### Agents
40
44
41
-
Next, you need to install agents on your own infrastructure. These agents are connectivity tools that initiate an outgoing connection to the network Mendix created for you.
45
+
Next, you need to install agents on your own infrastructure. These agents are connectivity tools that initiate an outgoing connection to the private connectivity network Mendix created for you.
42
46
43
47
Agents require authentication keys that are managed on the Mendix platform, and can only connect to the network to which their authentication key is linked.
44
-
Agents can be installed directly on the network which hosts the resources to which you want to connect. Alternatively, they can be installed on a separate network from where they have access to the resources.
48
+
Each agent must be installed on a server that has access to the resources to which you want to connect.
45
49
46
-
An agent can connect to only one network, but you can install multiple agents that connect to the same network. For example, you can install an agent in your on-premises data center and another agent in your AWS account, so that your Mendix apps can connect to resources on both infrastructures.
50
+
An agent can connect to a single private connectivity network, but you can install multiple agents that connect to the same private connectivity network. For example, you can install an agent in your on-premises data center and another agent in your AWS account, so that your Mendix apps can connect to resources on both infrastructures.
47
51
48
52
### Resources
49
53
50
54
Once agents are installed, you need to use them to expose resources. These resources are subnets of a network. They are available through the agent, and not through the public internet.
51
55
52
-
Resources exposed via agents must always be enabled on the Mendix platform before they can be connected to from your Mendix apps. This gives you full control over what resources are accessible.
56
+
Resources exposed via agents must always be enabled on the Mendix platform before your Mendix apps can connect to them. This gives you full control over what resources are accessible.
53
57
54
58
### Connections
55
59
@@ -81,4 +85,4 @@ At this time, it is not possible to connect to an existing Tailnet if you are an
81
85
82
86
## Resources
83
87
84
-
For information on how to configure and use Mendix Private Connectivity, refer to [Configuring and Using Private Connectivity](/control-center/configure-private-connectivity/).
88
+
For information on how to configure and use Mendix Private Connectivity, refer to [Configuring and Using Private Connectivity](/control-center/configure-private-connectivity/).
Expand all lines: content/en/docs/control-center/security/private-connectivity/configure-private-connectivity.md
+30-29Lines changed: 30 additions & 29 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -17,30 +17,30 @@ To connect from a Mendix app to a resource on your internal network, you need to
17
17
6. Enable resources. This is done on the Mendix platform.
18
18
7. Request a connection. This is done on the Mendix platform.
19
19
8. Approve the connection. This is done on the Mendix platform.
20
-
9. Configure DNS (optional). This is done on the Mendix platform.
20
+
<!--9. Configure DNS (optional). This is done on the Mendix platform.-->
21
21
22
22
The following sections provide details on each of the steps.
23
23
24
24
## Networks {#private-connectivity-networks}
25
25
26
-
Mendix Private Connectivity networks are the bridge between Mendix Cloud and your own infrastructure. You need at least one network to be able to connect from a Mendix app to your own infrastructure. You can, however, create multiple networks, for example, to isolate your production traffic from non-production traffic.
26
+
Mendix Private Connectivity networks are the bridge between Mendix Cloud and your own infrastructure. You need at least one network to be able to connect from a Mendix app to your own infrastructure. You can, however, create multiple networks if, for example, you want to isolate your production traffic from non-production traffic.
27
27
28
-
On the **Networks** tab of the **Private Connectivity** page, you can see all the networks associated to your company. The page shows the following information for each network:
28
+
On the **Networks** tab of the **Private Connectivity** page, you can see all the private connectivity networks associated to your company. The page shows the following information for each network:
29
29
30
30
***Network** – The name of the network.
31
31
***External Agents** – The number of agents that are installed on your internal infrastructure, and that are connected to the network.
32
32
***Environments** – The number of app environments on Mendix Cloud that have at least one connection using the network.
33
33
***Actions** – A list of actions that you can take on the network:
34
34
35
35
***Details**
36
-
***Add DNS**
36
+
<!--* **Add DNS**-->
37
37
* **Add Agent**
38
-
* **Edit**
39
-
* **Delete**
38
+
<!-- * **Edit**
39
+
* **Delete** -->
40
40
41
41
### Adding a Network {#private-connectivity-networks-add}
42
42
43
-
To add a new network for your company, follow these steps:
43
+
To add a new private connectivity network for your company, follow these steps:
44
44
45
45
1. On the **Private Connectivity** page, click one of these buttons, depending on your scenario:
46
46
@@ -52,7 +52,7 @@ To add a new network for your company, follow these steps:
52
52
4. On the **Add Agent** tab, provide a descriptive and recognizable name for the new agent, then click **Add**.
53
53
Refer to [Adding an Agent](#private-connectivity-agents-add) for details.
54
54
55
-
Your network and agent are now added. You can continue with [installing the agent](#private-connectivity-agents-install) on your infrastructureand [configuring the DNS](#private-connectivity-networks-dns) for your network.
55
+
Your network and agent are now added. You can continue with [installing the agent](#private-connectivity-agents-install) on your infrastructure. <!--and [configuring the DNS](#private-connectivity-networks-dns) for your network.-->
56
56
57
57
### Viewing and Editing Networks {#private-connectivity-networks-details}
58
58
@@ -63,16 +63,16 @@ To view and edit an existing network, follow these steps:
63
63
3. Select **Details**. The details of that network are displayed:
64
64
65
65
***Network** – The name you gave to the network. This field is editable.
66
-
***Network ID** – The internal ID of your network. You can copy this, for example, if you want to provide it in a support ticket for any issues with the network.
66
+
***Network ID** – The internal ID of your network. You can copy this if, for example, you want to provide it in a support ticket for any issues with the network.
67
67
***External Agents** – A list of all external agents that run on your own internal infrastructure, and that have access to the network.
68
68
This field also displays the status of each agent.
69
-
* **DNS Details** – A list of domains for which you have [configured DNS](#private-connectivity-networks-dns).
69
+
<!-- * **DNS Details** – A list of domains for which you have [configured DNS](#private-connectivity-networks-dns). -->
70
70
* **Environment Details** – A list of app environments that are using the network to connect to a resource, as well as the environment's status.
71
-
* **Show Logs** – This allows you to see [the flow logs](https://tailscale.com/kb/1219/network-flow-logs) for your network. They can help you troubleshoot issues with connectivity on your network.
71
+
<!-- * **Show Logs** – This allows you to see [the flow logs](https://tailscale.com/kb/1219/network-flow-logs) for your network. They can help you troubleshoot issues with connectivity on your network. -->
72
72
73
73
4. Click **Save** to save any changes you have made.
74
74
75
-
### Configuring DNS for your Network {#private-connectivity-networks-dns}
75
+
<!--### Configuring DNS for your Network {#private-connectivity-networks-dns}
76
76
77
77
If your Mendix app connects to external resources, you probably want to do this using host names. DNS (Domain Name System) servers, also known as nameservers, translate a host name, like `www.mendix.com` to an IP address, like `192.168.1.1`. If the DNS record with that translation is on a public nameserver, Mendix apps can access those by default with no issues. However, if you want to connect to a private host name, like `mydatabase.myinternalnetwork.net`, where the DNS record for this host name is stored on a private nameserver, your Mendix app will not be able to resolve the host name to an IP address, thus making the host inaccessible for the Mendix application.
78
78
@@ -130,11 +130,11 @@ When you delete a network, the following actions also occur:
130
130
{{% alert color="warning" %}}
131
131
When you delete a network, agents that are connected to your infrastructure are not uninstalled.
132
132
Refer to the instructions for [uninstalling an agent](#private-connectivity-agents-uninstall).
133
-
{{% /alert %}}
133
+
{{% /alert %}}-->
134
134
135
135
## Agents {#private-connectivity-agents}
136
136
137
-
To connect your infrastructure to your Mendix Private Connectivity networks, you need agents.
137
+
To connect your infrastructure to your private connectivity networks, you need agents.
138
138
At least one agent is necessary to be able to connect from a Mendix app to your infrastructure, but you can connect multiple agents to each network.
139
139
140
140
On the **Agents** tab of the **Private Connectivity** page, you can see all the agents associated to your company. The page displays the following information for each agent:
@@ -145,18 +145,19 @@ On the **Agents** tab of the **Private Connectivity** page, you can see all the
145
145
***Status (Last seen)** – The status of the agent, or the last time it was connected to the network:
146
146
147
147
***Connected** – The agent is currently connected to the network.
148
-
* Date and time – The last time the agent was connected to the network. The agent is not connected at this time.
148
+
* Date and time – The last time the agent was connected to the network. The agent is not connected at this time.
149
149
150
150
### Adding an Agent {#private-connectivity-agents-add}
151
151
152
-
You can only add agents if you have at least one network. Refer to [Adding a Network](#private-connectivity-networks-add) to create a network if you have not done so already.
152
+
You can only add agents if you have at least one private connectivity network. Refer to [Adding a Network](#private-connectivity-networks-add) to create a network if you have not done so already.
153
153
154
154
To add a new agent to a network, follow these steps:
155
155
156
156
1. Launch the agent wizard by choosing one of the following options:
157
157
158
158
* On the **Networks** tab, select a network to which you want to add an agent, then click **More Options** ({{< icon name="three-dots-menu-horizontal" >}}), and select **Add Agent**.
159
159
* On the **Agents** tab, click **Add Agent**.
160
+
160
161
2. On the **Add Agent** tab, select the network to which you want to add the agent.
161
162
3. Provide a descriptive and recognizable name for the agent.
162
163
4. Select the infrastructure type for your agent.
@@ -172,7 +173,7 @@ To view and edit an existing agent, follow these steps:
172
173
2. Click **More Options** ({{< icon name="three-dots-menu-horizontal" >}}), then select **Details**. The details of that agent are displayed:
173
174
174
175
***Agent Name** – The name you gave to the agent. This field is editable.
175
-
***Agent ID** – The internal ID of your agent. You can copy this, for example, if you want to provide it in a support ticket for any issues with the agent.
176
+
***Agent ID** – The internal ID of your agent. You can copy this if, for example, you want to provide it in a support ticket for any issues with the agent.
176
177
***Agent Key** – The authentication key of your agent. You can copy this authentication key for use when [starting an agent](#private-connectivity-agents-run).
177
178
This key should be treated as confidential.
178
179
* **Network** – The network to which the agent is connected.
@@ -242,7 +243,7 @@ You need to replace `AUTH_KEY` with the authentication key of your agent.
242
243
tailscale up --auth-key=<AUTH_KEY>
243
244
```
244
245
245
-
### Uninstalling an Agent on your Infrastructure {#private-connectivity-agents-uninstall}
246
+
### Uninstalling an Agent from your Infrastructure {#private-connectivity-agents-uninstall}
246
247
247
248
After [deleting an agent](#private-connectivity-agents-delete), you can uninstall it from your infrastructure. Uninstalling an agent is typically done by your internal IT department, Infra department, or Network team.
248
249
@@ -316,8 +317,8 @@ To view and edit a resource, follow these steps:
***Resource Name** – The name you gave to the resource. This field is editable.
320
-
***Resource ID** – The internal ID of your resource. You can copy this, for example, if you want to provide it in a support ticket for any issues with the agent.
320
+
***Resource** – The name you gave to the resource. This field is editable.
321
+
***Resource ID** – The internal ID of your resource. You can copy this if, for example, you want to provide it in a support ticket for any issues with the agent.
321
322
***Resource Type** – The type of resource, which can be:
322
323
323
324
***Route** – The resource is an exposed subnet route.
@@ -338,9 +339,9 @@ To view and edit a resource, follow these steps:
338
339
339
340
Before you can connect to resources running on your own infrastructure, you have to expose these resources through an agent. This requires you to install an agent on the machine running the resource, or on a machine that has access to the resource.
340
341
341
-
Mendix Cloud Private Connectivity currently supports exposing physical [subnet routes](https://tailscale.com/kb/1019/subnets) to your network via an agent. You can expose a single IP range, such as `192.0.2.0/24`, or multiple IP ranges separated by a semicolon, such as `192.0.2.0/24,198.51.100.0/24`.
342
+
Mendix Cloud Private Connectivity currently supports exposing physical [subnet routes](https://tailscale.com/kb/1019/subnets) to your network via an agent. You can expose a single IP range, such as `192.0.2.0/24`, or multiple IP ranges separated by a colon, such as `192.0.2.0/24,198.51.100.0/24`.
342
343
343
-
#### Exposing Subnet Routes on a Windows server {#private-connectivity-resources-expose-routes-windows}
344
+
#### Exposing Subnet Routes on a Windows Server {#private-connectivity-resources-expose-routes-windows}
344
345
345
346
To expose subnet routes for an agent that is already running, run the following script on the machine where the agent is installed.
346
347
Replace `IP_RANGE` with the IP ranges you want to expose:
@@ -356,7 +357,7 @@ In that case, use the following script, replacing `AUTH_KEY` with the authentica
356
357
tailscale up --auth-key=<AUTH_KEY> --advertise-routes=<IP_RANGE>
357
358
```
358
359
359
-
#### Exposing Subnet Routes on a Linux server {#private-connectivity-resources-expose-routes-linux}
360
+
#### Exposing Subnet Routes on a Linux Server {#private-connectivity-resources-expose-routes-linux}
360
361
361
362
To expose subnet routes for an agent on a Linux server, follow these steps:
362
363
@@ -373,7 +374,7 @@ You can also configure the exposed subnet routes when starting the agent. In tha
373
374
sudo tailscale up --auth-key=<AUTH_KEY> --advertise-routes=<IP_RANGE>
374
375
```
375
376
376
-
### Enabling and disabling Resources {#private-connectivity-resources-enable-disable}
377
+
### Enabling and Disabling Resources {#private-connectivity-resources-enable-disable}
377
378
378
379
Once resources are [exposed](#private-connectivity-resources-expose), they must be enabled by a Mendix Admin. Users can only request connections to resources once they have been enabled.
379
380
@@ -429,11 +430,11 @@ To view an existing connection, follow these steps:
429
430
* **Environment** – The name of the environment for the connection.
430
431
* **Network** – The network for the connection.
431
432
* **Resource** – The name of the resource for the connection.
432
-
* **Resource ID** – The internal ID of your resource. You can copy this, for example, if you want to provide it in a support ticket.
433
+
* **Resource ID** – The internal ID of your resource. You can copy this if, for example, you want to provide it in a support ticket.
433
434
* **Agent** – The name of the agent for the connection.
434
-
* **Agent ID** – The internal ID of the agent. You can copy this, for example, if you want to provide it in a support ticket.
435
+
* **Agent ID** – The internal ID of the agent. You can copy this if, for example, you want to provide it in a support ticket.
435
436
* **Network** – The name of the network for the connection.
436
-
* **Network ID** – The internal ID of the network. You can copy this, for example, if you want to provide it in a support ticket.
437
+
* **Network ID** – The internal ID of the network. You can copy this if, for example, you want to provide it in a support ticket.
437
438
438
439
## Approving and Rejecting Connections {#private-connectivity-connections}
439
440
@@ -453,6 +454,6 @@ To disable a connection, follow these steps:
453
454
1. On the **Connections** tab, find the connection you want to disable.
454
455
2. Click **Reject**.
455
456
456
-
## Activities
457
+
<!--## Activities
457
458
458
-
On the **Activities** tab, you can view a log of activities performed on your Private Connectivity assets.
459
+
On the **Activities** tab, you can view a log of activities performed on your Private Connectivity assets.-->
0 commit comments