mirror of
https://github.com/status-im/consul.git
synced 2025-01-18 09:41:32 +00:00
Fix removed service-to-service peering links (#17221)
* docs: fix removed service-to-service peering links * docs: extend peering-via-mesh-gateways intro (thanks @trujillo-adam) --------- Co-authored-by: trujillo-adam <47586768+trujillo-adam@users.noreply.github.com>
This commit is contained in:
parent
7f3446ecec
commit
2c2e62852d
@ -7,9 +7,7 @@ description: >-
|
||||
|
||||
# Enabling Peering Control Plane Traffic
|
||||
|
||||
In addition to [service-to-service traffic routing](/consul/docs/connect/cluster-peering/usage/establish-cluster-peering),
|
||||
we recommend routing control plane traffic between cluster peers through mesh gateways
|
||||
to simplfy networking requirements.
|
||||
This topic describes how to configure a mesh gateway to route control plane traffic between Consul clusters that share a peer connection. For information about routing service traffic between cluster peers through a mesh gateway, refer to [Enabling Service-to-service Traffic Across Admin Partitions](/consul/docs/connect/gateways/mesh-gateway/service-to-service-traffic-partitions).
|
||||
|
||||
Control plane traffic between cluster peers includes
|
||||
the initial secret handshake and the bi-directional stream replicating peering data.
|
||||
@ -60,6 +58,7 @@ For Consul Enterprise clusters, mesh gateways must be registered in the "default
|
||||
<Tab heading="Consul OSS">
|
||||
|
||||
In addition to the [ACL Configuration](/consul/docs/connect/cluster-peering/tech-specs#acl-specifications) necessary for service-to-service traffic, mesh gateways that route peering control plane traffic must be granted `peering:read` access to all peerings.
|
||||
|
||||
This access allows the mesh gateway to list all peerings in a Consul cluster and generate unique routing per peered datacenter.
|
||||
|
||||
<CodeTabs heading="Example ACL rules for Mesh Gateway Peering Control Plane Traffic in Consul OSS">
|
||||
@ -81,6 +80,7 @@ peering = "read"
|
||||
<Tab heading="Consul Enterprise">
|
||||
|
||||
In addition to the [ACL Configuration](/consul/docs/connect/cluster-peering/tech-specs#acl-specifications) necessary for service-to-service traffic, mesh gateways that route peering control plane traffic must be granted `peering:read` access to all peerings in all partitions.
|
||||
|
||||
This access allows the mesh gateway to list all peerings in a Consul cluster and generate unique routing per peered partition.
|
||||
|
||||
<CodeTabs heading="Example ACL rules for Mesh Gateway Peering Control Plane Traffic in Consul Enterprise">
|
||||
|
@ -84,7 +84,7 @@ spec:
|
||||
|
||||
### Deploy the mesh gateway
|
||||
|
||||
The mesh gateway must be running and registered to the Lambda function’s Consul datacenter. Refer to the following documentation and tutorials for instructions:
|
||||
The mesh gateway must be running and registered to the Lambda function’s Consul datacenter. Refer to the following documentation and tutorials for instructions:
|
||||
|
||||
- [Mesh Gateways between WAN-Federated Datacenters](/consul/docs/connect/gateways/mesh-gateway/service-to-service-traffic-wan-datacenters)
|
||||
- [Mesh Gateways between Admin Partitions](/consul/docs/connect/gateways/mesh-gateway/service-to-service-traffic-partitions)
|
||||
|
Loading…
x
Reference in New Issue
Block a user