Skip to content

AWS PrivateLink Private Beta [DOC-876] #6708

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Jun 18, 2024
Merged

AWS PrivateLink Private Beta [DOC-876] #6708

merged 12 commits into from
Jun 18, 2024

Conversation

forstisabella
Copy link
Contributor

Proposed changes

Added a doc for the AWS PrivateLink private beta. Will readjust IA as this goes public, but for now, it's a giant hidden page.

Merge timing

After approval from eng!

Related issues (optional)

@forstisabella forstisabella requested review from a team and cmastr and removed request for a team June 13, 2024 21:17
Copy link

netlify bot commented Jun 13, 2024

Deploy Preview for segment-docs ready!

Name Link
🔨 Latest commit d597325
🔍 Latest deploy log https://app.netlify.com/sites/segment-docs/deploys/666b6301e1e1150008aa1564
😎 Deploy Preview https://deploy-preview-6708--segment-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

Copy link

netlify bot commented Jun 13, 2024

Deploy Preview for segment-docs ready!

Name Link
🔨 Latest commit 718ee6b
🔍 Latest deploy log https://app.netlify.com/sites/segment-docs/deploys/66709015e940f20008ea6f44
😎 Deploy Preview https://deploy-preview-6708--segment-docs.netlify.app
📱 Preview on mobile
Toggle QR Code...

QR Code

Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify site configuration.

- ra3.4xlarge
- ra3.xlplus
- **You've enabled cluster relocation**: Cluster relocation migrates your cluster behind a proxy and keeps the cluster endpoint unchanged, even if your cluster needs to be migrated to a new Availability Zone. A consistent cluster endpoint makes it possible for Segment's Edge account and VPC to remain connected to your cluster. To enable cluster relocation, follow the instructions in the AWS [Relocating your cluster](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html){:target="_blank”} documentation.
- **Your warehouse is using port range 5431-5455 and 8191-8215**: Clusters with cluster relocation enabled [might encounter an error if updated to include a port outside of this range](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html#:~:text=You%20can%20change%20to%20another%20port%20from%20the%20port%20range%20of%205431%2D5455%20or%208191%2D8215.%20(Don%27t%20change%20to%20a%20port%20outside%20the%20ranges.%20It%20results%20in%20an%20error.)){:target="_blank”}.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry, I think we gave you the wrong info on the privatelink slides (assuming that's where you got this from). It's actually the Redshift cluster that needs to use a port within the ranges 5431-5455 or 8191-8215. Naturally, the warehouse needs to point to the same port as the cluster, but that's for later rather than a prerequisite.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@forstisabella It's the cluster that needs to be in the port range, not warehouse! Looks like you made a suggestion comment earlier which looked perfect, but it wasn't applied

2. Reach out to your Customer Success Manager (CSM) for more details about Segment's AWS principal.
3. Add the Segment AWS principal as an “Allowed Principal” to consume the Network Load Balancer VPC endpoint service you created in step 1.
4. Reach out to your CSM and provide them with the Service name for the service that you created above. Segment's engineering team provisions a VPC endpoint for the service in the Segment Edge VPC.
5. After creating the VPC, Segment provides you with private DNS so you can update the **Host** in your Segment app settings or create a new Redshift integration. <br> The following RDS Postgres integrations support PrivateLink:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

You wrote new Redshift integration, but this is the Postgres section!

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch!! thank you

- ra3.4xlarge
- ra3.xlplus
- **You've enabled cluster relocation**: Cluster relocation migrates your cluster behind a proxy and keeps the cluster endpoint unchanged, even if your cluster needs to be migrated to a new Availability Zone. A consistent cluster endpoint makes it possible for Segment's Edge account and VPC to remain connected to your cluster. To enable cluster relocation, follow the instructions in the AWS [Relocating your cluster](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html){:target="_blank”} documentation.
- **Your warehouse is using port range 5431-5455 and 8191-8215**: Clusters with cluster relocation enabled [might encounter an error if updated to include a port outside of this range](https://docs.aws.amazon.com/redshift/latest/mgmt/managing-cluster-recovery.html#:~:text=You%20can%20change%20to%20another%20port%20from%20the%20port%20range%20of%205431%2D5455%20or%208191%2D8215.%20(Don%27t%20change%20to%20a%20port%20outside%20the%20ranges.%20It%20results%20in%20an%20error.)){:target="_blank”}.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@forstisabella It's the cluster that needs to be in the port range, not warehouse! Looks like you made a suggestion comment earlier which looked perfect, but it wasn't applied

@forstisabella forstisabella requested a review from a team as a code owner June 17, 2024 22:37
Copy link
Contributor

@AnnieZhao17 AnnieZhao17 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the updates!

@forstisabella forstisabella requested review from pwseg and removed request for cmastr and a team June 17, 2024 22:54
Co-authored-by: pwseg <86626706+pwseg@users.noreply.github.com>
@forstisabella forstisabella enabled auto-merge June 18, 2024 15:12
@forstisabella forstisabella merged commit 4a1bf90 into develop Jun 18, 2024
2 of 4 checks passed
@forstisabella forstisabella deleted the DOC-876 branch June 18, 2024 15:13
Copy link
Contributor

Thank you for your contribution! Your pull request is merged, but may take a day or two to appear on the site.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants