Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

VPC Private Connectivity #7400

Merged
merged 7 commits into from
Sep 23, 2024
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file added source/images/private-link-architecture.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
40 changes: 40 additions & 0 deletions source/manage/cloud-vpc-private-connectivity.rst
Original file line number Diff line number Diff line change
@@ -0,0 +1,40 @@
Cloud VPC Private Connectivity
stafot marked this conversation as resolved.
Show resolved Hide resolved
===============================

.. include:: ../_static/badges/ent-cloud-only.rst
:start-after: :nosearch:

Virtual Private Cloud (VPC) Private Connectivity (Private Link) offers Enterprise Cloud customers tailored solutions for private connectivity needs with Mattermost Cloud. These options enable customers to access Mattermost Cloud through AWS's network without using the public internet, or allow the Mattermost Infrastructure team to manage a Mattermost workspace hosted in the customer's VPC via an EKS cluster.
It also provides the ability for customers to connect from Mattermost Cloud to their private webhooks,endpoints and integrations.

The key objectives of this offering are to:

- Allow customers to access Mattermost Cloud within their internal network.
- Enable the Mattermost Infrastructure team to perform operations on a Mattermost workspace hosted in the customer’s VPC, upon request.
- Establish connectivity between the customer's VPC and Mattermost exclusively through AWS’s network, without exposure to the public internet.
- Ensure the setup process is straightforward and easy to implement.
- Adhere to all security best practices.

Architecture
-------------

.. image:: ../images/private-link-architecture.png
:alt: A generic overview of the Cloud VPC Private Connectivity Architecture

Configure VPC Private Connectivity
-----------------------------------

- Mattermost will provide Terraform modules tailored to the customer’s requirements.
- Both Mattermost and customer Infrastructure teams will collaborate to establish connectivity on both sides.
- AWS Private Link will be used to connect AWS accounts.

Requirements
~~~~~~~~~~~~~

- Customers must own their AWS Account.

Considerations
~~~~~~~~~~~~~~~

- Proper communication is essential for setting expectations and scheduling changes.

Loading