We have multiple servers to communicate with Bitbucket pipeline via push or pull mechanism, and can't provide every server with static NAT, please suggest how we can make connectivity with this limitation.
G'day, @Varun Kumar
You can consider a few options, provided that your server is under the same host, for example, EC2.
Elastic IPs and NAT Gateways:
Assign an Elastic IP to a NAT Gateway in your VPC. This NAT Gateway can be used for outbound internet traffic from private subnets, allowing your EC2 instances in the subnet to communicate with Bitbucket using a single static IP address.
Bastion Host:
Set up a bastion host (jump box) with an Elastic IP. This host can act as an intermediary for SSH connections, allowing you to manage your EC2 instances securely.
Here are some more example if you are hosting it on your Data Center:
Proxy Server:
Use a single proxy server with a static NAT that all your other servers can route their traffic through. This proxy server will handle requests to and from Bitbucket.
Reverse Proxy with Load Balancer:
Set up a reverse proxy or load balancer with a static IP address. This can route traffic to your internal servers and manage requests to Bitbucket.
SSH Jump Hosts:
Utilize a jump host with a static IP address for SSH tunneling. Your servers can SSH into this jump host, which then makes requests to Bitbucket.
I hope this provide you with some options to consider.
Regards,
Syahrul
Dear Syahru,
We have setup Jumserver with elastic IP and is reachable from all our internal servers, now we are unable to deploy the code on the backed servers, do we have make any changes anywhere on Firewall or AWS Junp or other EC2 instances
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Varun Kumar
I recommend reaching out to AWS Support at this stage, as they have the expertise needed for configuring networks within AWS.
However, I found a few available resources during my search that you can use as a guide:
How to set up an AWS Bastion host or a Jump server
Regards,
Syahrul
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.