IP ACL creation

Objective

This guide shows you how to create an IP ACL to allow access to your Ceph cluster, using the OVHcloud Control Panel or the OVHcloud API.

Requirements

• A Cloud Disk Array solution
• Access to the OVHcloud Control Panel or to the OVHcloud API

Instructions

Using the OVHcloud Control Panel

First, log in to your OVHcloud Control Panel and click on Bare Metal Cloud. In the section called STORAGE AND BACKUPS, click the Cloud Disk Array service.

Here you'll find the existing ACL in IP access control, by default there is no ACL.

Get your ip address:

admin@server:~$ ip -4 a
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 123.123.123.123/32 brd 234.234.234.234 scope global eth0
      valid_lft forever preferred_lft forever

Add your IP.

Then create the IP ACL.

After the pool creation, you can see that the cluster status has changed because the ACL is being created.

Using the API

Use the following API call:

serviceName is the fsid of your cluster.

You can check ACL creation by listing ACL:

Example:

GET /dedicated/ceph/98d166d8-7c88-47b7-9cb6-63acd5a59c15/acl
[
  {
    network: "123.123.123.123"
    id: 57054
    netmask: "255.255.255.255"
    family: "IPV4"
  }
]

Go further

Visit our dedicated Discord channel: https://discord.gg/ovhcloud. Ask questions, provide feedback and interact directly with the team that builds our Storage and Backup services.

If you need training or technical assistance to implement our solutions, contact your sales representative or click on this link to get a quote and ask our Professional Services experts for assisting you on your specific use case of your project.

Join our community of users.