Skip to content

Commit

Permalink
VPC Private Connectivity (#7400)
Browse files Browse the repository at this point in the history
* VPC Private Connectivity

Signed-off-by: Stavros Foteinopoulos <[email protected]>

* Apply suggestions from code review

Co-authored-by: Carrie Warner (Mattermost) <[email protected]>

* review fixes

Signed-off-by: Stavros Foteinopoulos <[email protected]>

* review fixes 2

Signed-off-by: Stavros Foteinopoulos <[email protected]>

---------

Signed-off-by: Stavros Foteinopoulos <[email protected]>
Co-authored-by: Carrie Warner (Mattermost) <[email protected]>
  • Loading branch information
stafot and cwarnermm authored Sep 23, 2024
1 parent afec8c7 commit 015a8c6
Show file tree
Hide file tree
Showing 2 changed files with 40 additions and 0 deletions.
Binary file added source/images/private-link-architecture.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
40 changes: 40 additions & 0 deletions source/manage/cloud-vpc-private-connectivity.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
Cloud VPC Private Connectivity
===============================

.. include:: ../_static/badges/ent-cloud-only.rst
:start-after: :nosearch:

Virtual Private Cloud (VPC) Private Connectivity (Private Link) offers Enterprise Cloud customers tailored solutions for private connectivity needs with Mattermost Cloud. These options enable customers to access Mattermost Cloud through AWS's network without using the public internet, or allow the Mattermost Infrastructure team to manage a Mattermost workspace hosted in the customer's VPC via an EKS cluster.
It also provides the ability for customers to connect from Mattermost Cloud to their private webhooks,endpoints and integrations.

The key objectives of this offering are to:

- Allow customers to access Mattermost Cloud within their internal network.
- Enable the Mattermost Infrastructure team to perform operations on a Mattermost workspace hosted in the customer’s VPC, upon request.
- Establish connectivity between the customer's VPC and Mattermost exclusively through AWS’s network, without exposure to the public internet.
- Ensure the setup process is straightforward and easy to implement.
- Adhere to all security best practices.

Architecture
-------------

.. image:: ../images/private-link-architecture.png
:alt: A generic overview of the Cloud VPC Private Connectivity Architecture

Configure VPC Private Connectivity
-----------------------------------

- Mattermost will provide Terraform modules tailored to the customer’s requirements.
- Both Mattermost and customer Infrastructure teams will collaborate to establish connectivity on both sides.
- AWS Private Link will be used to connect AWS accounts.

Requirements
~~~~~~~~~~~~~

- Customers must own their AWS Account.

Considerations
~~~~~~~~~~~~~~~

- Proper communication is essential for setting expectations and scheduling changes.

0 comments on commit 015a8c6

Please sign in to comment.