[英]Access to Amazon Elasticsearch Service via Client VPN Endpoint
I'm currently learning AWS and I'm stuck.我目前正在学习 AWS,但被卡住了。 I created Amazon Elasticsearch Service domain in my VPC, in subnet A (one of 3 default subnets).我在我的 VPC 中的子网 A(3 个默认子网之一)中创建了 Amazon Elasticsearch Service 域。 The access is available through VPC, not from the Internet.访问是通过 VPC 进行的,而不是通过 Internet 进行的。 I wanted to connect to it from my computer (to create indexes, mappings, etc.) I've read that one of the ways to do that is to connect to VPC using VPN.我想从我的计算机连接到它(以创建索引、映射等)。我读过其中一种方法是使用 VPN 连接到 VPC。
So, I configured AWS Client VPN Endpoint using subnet A and connected from my computer (openVPN).因此,我使用子网 A 配置了 AWS Client VPN 端点并从我的计算机 (openVPN) 连接。 I'm connected, I see my connection in AWS console.我已连接,我在 AWS 控制台中看到了我的连接。 Connection looks ok.连接看起来没问题。
I used Kibana url from AWS console: https://vpc-blablabla.eu-central-1.es.amazonaws.com/_plugin/kibana/ and there is no connection ('ERR_CONNECTION_TIMED_OUT').我从 AWS 控制台使用 Kibana url: https ://vpc-blablabla.eu-central-1.es.amazonaws.com/_plugin/kibana/ 并且没有连接('ERR_CONNECTION_TIMED_OUT')。
AES domain uses security group with ALL income/outcome traffic allowed. AES 域使用允许所有收入/结果流量的安全组。 The DNS resolves domain from the Kibana url properly (It's from subnet A). DNS 从 Kibana url 正确解析域(它来自子网 A)。 Should my IP in VPN match subnet's A CIDR?我在 VPN 中的 IP 应该与子网的 A CIDR 匹配吗? Now it's completely different.现在完全不同了。
Subnet A CIDR: 172.31.0.0/20
VPN Client IPv4 CIDR: 10.5.0.0/20
VPN current IP: 10.5.0.2
Is that a cause of the problem?这是问题的原因吗?
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.