CacheStore(DBaaS) server connection

Scenario Overview

CacheStore(DBaaS) connection scenario is a scenario where Bastion host (Virtual Server) and Database service are created, and the DB service is accessed through the Bastion host. To connect to CacheStore (DBaaS) stably in the Samsung Cloud Platform environment, it is necessary to create a Bastion host and use it for network connection. To maintain a stable and high level of security, it is recommended to configure the Database service in a Private Subnet environment and configure the Bastion host in a limited Public Subnet environment.

This scenario largely describes the process of creating a Bastion host and Database service, and configuring the network environment for Bastion host and Database connection, allowing access through a DB connection client.

Scenario Components

You can configure the scenario using the following services.

Scenario composition method

To configure the scenario, create the necessary services through the following procedure.

1. Configuring the Network

This describes the process of configuring the network environment for connecting to the Bastion Host and Database services.

1-1. Creating a VPC

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. On the Service Home page, click the Create VPC button. It moves to the Create VPC page.
3. VPC Creation page, please enter the information required for service creation.
   • IP range should be entered as 192.168.x.0/16.
4. In the Summary panel, review the detailed information and estimated charges, and then click the Complete button.
   • Once creation is complete, check the created resource on the VPC list page.

1-2. Creating a Subnet

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Service Home page, click the Subnet menu. It moves to the Subnet list page.
3. Click the Subnet Creation button. It moves to the Subnet Creation page.
4. Subnet Creation page where you enter the information needed to create a service.
   • Subnet type should be selected as General.
   • Please select a pre-created VPC.
   • IP range should be entered as 192.168.x.0/24.
5. In the Summary panel, review the detailed information and estimated charges, and click the Complete button.
   • Once creation is complete, check the created resource on the Subnet list page.

1-3. Creating an Internet Gateway

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Service Home page, click the Internet Gateway menu. Move to the Internet Gateway list page.
3. Click the Create Internet Gateway button. It moves to the Create Internet Gateway page.
4. Internet Gateway creation page, please enter the required information necessary for service creation.
   • Please select a pre-created VPC.
   • Select Use in the Firewall usage item.
5. In the Summary panel, review the detailed information and the estimated charge amount, and then click the Complete button.
   • Once the creation is complete, check the created resource on the Internet Gateway list page.

1-4. Creating a Public IP

1. Click All services > Networking > VPC menu. It moves to the Service Home page of VPC.
2. Service Home page, click the Public IP menu. It moves to the Public IP list page.
3. Public IP Reservation 버튼을 클릭하세요. Public IP Reservation 페이지로 이동합니다.
4. Public IP Reservation page, please enter the required information necessary for service reservation.
5. In the Summary panel, review the detailed information and estimated charges, and then click the Complete button.
   • Once creation is complete, check the created resource on the Public IP list page.

1-5. Creating a Security Group

1. Click All Services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. Service Home page, click the Create Security Group button. Move to the Create Security Group page.
3. Security Group Creation page, please enter the required information necessary for service creation.
4. Check the input information and click the Complete button.
   • Once creation is complete, check the created resource on the Security Group list page

2. Creating a Bastion host

This describes the process of configuring the Bastion Host where the database connection client should be installed.

2-1. Creating a Server Keypair

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Service Home page, click the Keypair menu. It moves to the Keypair list page.
3. Create Keypair button will be clicked. It moves to the Create Keypair page.
4. Keypair creation page where you enter the required information necessary for service creation.
5. Check the creation information and click the Complete button.
   • The key download is only available for the first time, and re-issuance is not provided.
   • Please make sure to store the downloaded key in a safe place.

2-2. Creating a Bastion Host

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Service Home page, click the Virtual Server creation button. Move to the Virtual Server creation page.
3. Virtual Server Creation page, please enter the required information necessary for service creation.
   • Image is Windows, please select.
   • Please select the pre-created VPC and Subnet.
   • Click NAT and select the Public IP reserved in 1-4. Public IP 생성하기.
   • 2-1. Creating Server Keypair Connect the Keypair created from 2-1. 서버 Keypair 생성하기.
4. In the Summary panel, review the detailed information and estimated billing amount, and click the Complete button.
   • Once the creation is complete, check the created resource on the Virtual Server list page.

2-3. Check Bastion host connection ID and PW

1. Click All Services > Compute > Virtual Server menu. It moves to the Service Home page of Virtual Server.
2. Service Home page, click the Virtual Server menu. Move to the Virtual Server list page.
3. Virtual Serve list page, click on the resource created in 2-2. Creating a Bastion host. It moves to the detailed information page of the corresponding resource.
4. Click the RDP password inquiry button in the Keypair item on the detailed information page. The RDP password inquiry popup window opens.
5. RDP password inquiry popup window, attach the keypair file downloaded from 2-1. Server Keypair creation.
6. After attaching, click the Password confirmation button. The ID and password required to access the resource will be displayed.
   • The ID and Password will be used as information to connect to the Bastion host later in 5-1. Connect to Bastion host.

3. Creating a Database

It describes the process of creating a Database service.

3-1. Creating CacheStore (DBaaS) Service

1. All services > Database > CacheStore(DBaaS) menu is clicked. It moves to the Service Home page of CacheStore(DBaaS).
2. On the Service Home page, click the CacheStore(DBaaS) creation button. It moves to the CacheStore(DBaaS) creation page.
3. CacheStore(DBaaS) creation page, please enter the required information needed for service creation.
   • Select and connect to the pre-created VPC and Subnet.
   • Enter database-related creation information on the essential information input screen.
   • Add the Bastion host IP to the IP access control item.
   • Database Port is 2866 by default, but users can also specify it.
4. In the Summary panel, review the detailed information and estimated charges, and then click the Complete button.
   • Once creation is complete, check the created resource on the CacheStore(DBaaS) list page.

4. Setting Rules

This describes the process of setting rules for users to access the Bastion host and for the Bastion host to access the Database.

4-1. Security Group Add Security Rules

1. Click All Services > Networking > Security Group menu. It moves to the Service Home page of Security Group.
2. Service Home page, click the Security Group menu. Move to the Security Group list page.
3. 1-5. Creating a Security Group Select the Security Group resource created from 1-5. Creating a Security Group. It moves to the detailed information page of the corresponding resource.
4. Click the Rules tab on the detailed information page. It moves to the Rules tab.
5. Rule tab, click the Add Rule button. It moves to the Add Rule popup window.
6. In the Add Rule popup window, enter the following rules and click the OK button

4-2. Adding IGW Firewall Rules

1. Click All services > Networking > Firewall menu. It moves to the Service Home page of Firewall.
2. Service Home page, click the Firewall menu. It moves to the Firewall list page.
3. Firewall list page, select the Internet Gateway resource name created in 1-3. Internet Gateway creation. It moves to the detailed information page of the corresponding resource.
4. Click the Rules tab on the detailed information page. It moves to the Rules tab.
5. Rule tab, click the Add Rule button. Move to the Add Rule popup window.
6. In the Add Rule popup window, enter the following rules and click the OK button.

5. Connecting to the Database

This explains the process of a user accessing the Database through a DB connection client program.

This guide provides instructions on how to connect using Another Redis Desktop Manager. There are various database client programs and CLI utilities, so you can also install and use the tools that are suitable for the user.

5-1. Connecting to the Bastion host

1. Run Remote Desktop Connection in the Windows environment of the PC you want to connect to the Bastion host, enter the NAT IP of the Bastion Host, and click the Connect button.
2. When the remote desktop connection is successful, the User Credential Input Window opens. Enter the ID and Password confirmed in 2-3. Check Bastion host access ID and PW and click the Confirm button.

5-2. Install DB connection client program (Another Redis Desktop Manager) on the Bastion host

1. Download another Redis Desktop Manager program.
   • Another Redis Desktop Manager program download path: https://github.com/qishibo/AnotherRedisDesktopManager/releases
2. Connect the hard drive of the user PC to upload the file to the Bastion host.
3. Click the Details button for local devices and resources items in the Local Resources tab of the remote desktop connection.
4. Select the local disk where the file was downloaded to the drive and click the Confirm button.
5. Download the file, copy it to the Bastion Host, and upload it, then click on the pgAdmin installation file to install it.

5-3. Using DB connection client program(Another Redis Desktop Manager) to connect to Database

1. Run Another Redis Desktop Manager and click New Connection. The New Connection popup window will appear.
2. New Connection popup window, enter the Database server information created in 3-1. CacheStore(DBaaS) 서비스 생성하기 and click the OK button.

   Required Input Element Items	Input Value
   Host	Database Server IP
   Port	Database Port
   Password	Database password
   Connection Name	Custom (ex. Service Name)

   DB Connection Client Program Input Items
3. After connecting, you can perform basic information checks on Redis, data management, and CRUD operations on keys.