检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
If EIPs in the EIPPool are used by NAT or ELB, the management fails. The following example shows how to create a static EIPPool named eippool-demo2 and manage public IP addresses 10.246.173.254 and 10.246.172.3 in it.
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Accessing Public Networks from a Container You can use NAT Gateway to enable containers in a VPC to access the public network.
For details about how to use the NAT gateway, see the NAT Gateway documentation. Setting Ingress-based Workload Access You can configure ingress-based access settings after a workload is created. The settings have no impact on the workload status and take effect immediately.
Solution Solution 1: Use the NAT Gateway service to enable container instances (pods) in a VPC to access public networks.
Figure 2 Architecture CCI is deeply integrated with network services, for example Virtual Private Cloud (VPC), Elastic Load Balance (ELB), and NAT Gateway, as well as storage services such as Elastic Volume Service (EVS).
NAT Gateway NAT Gateway provides source network address translation (SNAT), which translates private IP addresses to a public IP address by binding an elastic IP address (EIP) to the gateway. You can set an SNAT rule to allow containers in a VPC to access the Internet.
This includes but is not limited to virtual networks, the OS of virtual machine hosts and guests, virtual firewalls, API Gateway, advanced security services, all types of cloud services, tenant data, identity accounts, and key management.
Access to the public network from a workload: You can configure source network address translation (SNAT) rules in NAT Gateway, so that containers can access the public network. "Workload Network Access" > "Accessing Public Networks from a Container" in the User Guide.
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Default is "xfs". gateway String The host address of the ScaleIO API Gateway. protectionDomain String The name of the ScaleIO Protection Domain for the configured storage. readOnly Boolean Defaults to false (read/write).
Error Code Description If an error code starting with APIGW is returned after you call a CCI API, rectify the fault by referring to the instructions provided in API Gateway Error Codes.
Accessing Public Networks from a Container: Containers can access public networks by using SNAT rules, which are configured on the NAT Gateway. Figure 1 Network access diagram Parent topic: Network Management
*:get View details about all NAT Gateway resources. nat:*:list List all NAT Gateway resources. kms:*:get Query key information. kms:*:list List all keys.
You can use the NAT Gateway service available on the public cloud platform. This service offers NAT for containers in a VPC, allowing these containers to access the Internet using an EIP.
The server acting as a gateway or proxy receives an invalid response from a remote server. 503 ServiceUnavailable The requested service is invalid.
