Mailing-List: contact user-help@cassandra.apache.org; run by ezmlm
Precedence: bulk
Reply-To: user@cassandra.apache.org
Received-SPF: pass (nike.apache.org: domain of jared.biel@bolderthinking.com
 designates 209.85.216.176 as permitted sender)
MIME-Version: 1.0
In-Reply-To: 
 <CAL48JWmzJ9SLfBuTEak2_UrzxViLJs0gozn34jyhAxO-Q5mrgQ@mail.gmail.com>
References: 
 <CA+VSrLpESyjbh7v095+_X81xbgETyfyCYTmwNBbud3Y58O+gBQ@mail.gmail.com>
	<CA+VSrLpXgTeVqP2_XCzTmdRkEOtLrhxzMXpO_DS=XX2qwtd_Xw@mail.gmail.com>
	<CAL48JWmzJ9SLfBuTEak2_UrzxViLJs0gozn34jyhAxO-Q5mrgQ@mail.gmail.com>
Date: Mon, 27 Oct 2014 22:02:06 +0000
Message-ID: 
 <CAHoS6UZAhYxOt9iNLOuuGY1bkQBk-B=PEUfzBwCEMtxmu17dTA@mail.gmail.com>
Subject: Re: Multi Datacenter / MultiRegion on AWS Best practice ?
From: Jared Biel <jared.biel@bolderthinking.com>
To: user@cassandra.apache.org
Content-Type: multipart/alternative; boundary=001a11c1db70710e6405066eaebf

--001a11c1db70710e6405066eaebf
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

If you decide to go the iptables route, you could try neti
<https://github.com/Instagram/neti> (blog post here
<http://instagram-engineering.tumblr.com/post/100758229719/migrating-from-a=
ws-to-aws>
.)


On 27 October 2014 16:44, Juho M=C3=A4kinen <juho.makinen@gmail.com> wrote:

> Hi!
>
>
>> 2014-10-23 11:16 GMT+02:00 Alain RODRIGUEZ <arodrime@gmail.com>:
>>>
>>> We are currently wondering about the best way to configure network
>>> architecture to have a Cassandra cluster multi DC.
>>>
>>> On solution 2, we would need to open IPs one by one on 3 ports (7000,
>>> 9042, 9160) at least. 100 entries in a security group would allow us to
>>> have a maximum of ~30 nodes
>>>
>>
> You can also allow those ports from everywhere and then use local iptable=
s
> to limit the access to only those IPs which you are actually using. You'l=
l
> most certainly need some kind of configuration management system for this
> (Chef, puppet, salt-stack etc).
>

--001a11c1db70710e6405066eaebf
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">If you decide to go the iptables route, you could try <a h=
ref=3D"https://github.com/Instagram/neti">neti</a>=C2=A0(<a href=3D"http://=
instagram-engineering.tumblr.com/post/100758229719/migrating-from-aws-to-aw=
s">blog post here</a>.)<div class=3D"gmail_extra"><div><div dir=3D"ltr"><br=
></div></div>
<br><div class=3D"gmail_quote">On 27 October 2014 16:44, Juho M=C3=A4kinen =
<span dir=3D"ltr">&lt;<a href=3D"mailto:juho.makinen@gmail.com" target=3D"_=
blank">juho.makinen@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D=
"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding=
-left:1ex"><div dir=3D"ltr"><div class=3D"gmail_extra"><div class=3D"gmail_=
quote"><div>Hi!</div><div>=C2=A0</div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><=
div><div class=3D"gmail_extra"><div class=3D"gmail_quote"><span class=3D"">=
2014-10-23 11:16 GMT+02:00 Alain RODRIGUEZ <span dir=3D"ltr">&lt;<a href=3D=
"mailto:arodrime@gmail.com" target=3D"_blank">arodrime@gmail.com</a>&gt;</s=
pan>:</span><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bo=
rder-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><span class=3D"=
"><div>We are currently wondering about the best way to configure network a=
rchitecture to have a Cassandra cluster multi DC.</div><div><br></div></spa=
n><span class=3D""><div>On solution 2, we would need to open IPs one by one=
 on 3 ports (7000, 9042, 9160) at least. 100 entries in a security group wo=
uld allow us to have a maximum of ~30 nodes</div></span></div></blockquote>=
</div></div></div></div></blockquote><div><br></div><div>You can also allow=
 those ports from everywhere and then use local iptables to limit the acces=
s to only those IPs which you are actually using. You&#39;ll most certainly=
 need some kind of configuration management system for this (Chef, puppet, =
salt-stack etc).</div></div></div></div>
</blockquote></div><br></div></div>

--001a11c1db70710e6405066eaebf--