2

I have defined the following Jelastic configuration for my environment:

env:
  topology:
    nodes:
      - nodeGroup: bl 
        nodeType: nginx-dockerized
        tag: 1.14.2
        displayName: Node balancing
        count: 1
        fixedCloudlets: 1
        cloudlets: 4
        env:
          DOCKER_EXPOSED_PORT: 22,80,443
      - image: jenkins/jenkins:lts
        count: 1
        cloudlets: 16
        nodeGroup: cp
      - nodeGroup: sqldb

Now, I want the users of my environment to access my docker application only through the load balancing node. From Jelastic's dashboard, I can't seem to configure any firewall rules for the cp node group. How can I close any connection to the Jenkins node from the outside world and only keep it open from the nginx node?

Claudio
  • 10,614
  • 4
  • 31
  • 71
Laurent Michel
  • 1,069
  • 3
  • 14
  • 29

1 Answers1

1

As we can see, your environment has a custom Docker as a cp layer, that's why UI Firewall is not available for your cp node group. More details are in Container Firewall Rules Management article.

Nevertheless, even if your cp layer is not a custom Docker but Jelastic certified dockerized template, UI Firewall will be available but you will not be able to close direct access to this node via Shared Load Balancer anyway, due to internal limitations which will be improved in future releases. Some info you can find here

Custom Docker, unlike other types of templates, has a full root access, so you can easily configure firewall with help of a command line.

Virtuozzo
  • 1,993
  • 1
  • 10
  • 13
  • Ok I'll give it a go and maybe post my solution here how I managed to configure the firewall "easily" (lol). Thanks for the insight provided for my problem! Now I know at least in what direction I can continue working. – Laurent Michel May 16 '19 at 04:48
  • Oh and yeah, I have other environments that use Jelastic certified dockerized template as the cp node. I tried to use the firewall UI to close access to them without any success. I was asking myself why there was such a UI if the functionality behind doesn't work at all... – Laurent Michel May 16 '19 at 04:54