Skip to content

Commit 2e578e9

Browse files
bobbybhoeedugon
andauthored
add remote cluster traffic filter info in remote-cluster connection page (#1478)
This pull request updates the documentation for Elastic Cloud remote clusters to include a note about traffic filtering requirements when it is enabled. The note provides guidance for administrators on configuring a traffic filter for remote clusters. Documentation updates for traffic filtering: * [`deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md`](diffhunk://#diff-7e34b42994e11a4cb6ebbff3e91b94d3bce843ff14b18fd7876e6d821d10d148R239-R242): Added a note explaining that when traffic filtering is enabled, the remote cluster administrator must configure a traffic filter of type remote cluster using the organization ID or Elasticsearch cluster ID. A link to detailed instructions is also provided. * [`deploy-manage/remote-clusters/ec-remote-cluster-same-ess.md`](diffhunk://#diff-7981e127338b90c990011ed12b1da648a4eab1c554c97f5c5dcb8c12894b6110R276-R279): Added the same note about traffic filtering configuration as in the previous file, ensuring consistent guidance across documentation for remote clusters. https://elasticco.atlassian.net/browse/ECPTRAFFIC-546 --------- Co-authored-by: Edu González de la Herrán <[email protected]>
1 parent b64286e commit 2e578e9

File tree

3 files changed

+9
-2
lines changed

3 files changed

+9
-2
lines changed

deploy-manage/remote-clusters/ec-enable-ccs.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -58,6 +58,7 @@ The steps, information, and authentication method required to configure CCS and
5858
Traffic filtering isn’t supported for cross-cluster operations initiated from an {{ece}} environment to a remote {{ech}} deployment.
5959
::::
6060

61+
API key authentication for remote clusters cannot be used in combination with traffic filtering.
6162

6263
For remote clusters configured using TLS certificate authentication, [traffic filtering](../security/traffic-filtering.md) can be enabled to restrict access to deployments that are used as a local or remote cluster without any impact to cross-cluster search or cross-cluster replication.
6364

deploy-manage/remote-clusters/ec-remote-cluster-other-ess.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ products:
1313

1414
This section explains how to configure a deployment to connect remotely to clusters belonging to a different {{ecloud}} organization.
1515

16+
::::{note}
17+
If traffic filtering is enabled on the remote cluster, the remote cluster administrator must configure a traffic filter of type remote cluster, using either the organization ID or the Elasticsearch cluster ID as the filtering criteria. For detailed instructions, refer to [Remote clusters and traffic filtering](/deploy-manage/remote-clusters/ec-enable-ccs.md#ec-ccs-ccr-traffic-filtering).
18+
::::
19+
1620
## Allow the remote connection [ec_allow_the_remote_connection_2]
1721

1822
Before you start, consider the security model that you would prefer to use for authenticating remote connections between clusters, and follow the corresponding steps.
@@ -236,7 +240,6 @@ curl -X GET -H "Authorization: ApiKey $EC_API_KEY" https://api.elastic-cloud.com
236240
The response will include just the remote clusters from the same {{ecloud}} organization. In order to obtain the whole list of remote clusters, use {{kib}} or the [{{es}} API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-cluster-remote-info) directly.
237241
::::
238242

239-
240243
## Configure roles and users [ec_configure_roles_and_users_2]
241244

242245
To use a remote cluster for {{ccr}} or {{ccs}}, you need to create user roles with [remote indices privileges](../users-roles/cluster-or-deployment-auth/role-structure.md#roles-remote-indices-priv) on the local cluster. Refer to [Configure roles and users](remote-clusters-api-key.md#remote-clusters-privileges-api-key).

deploy-manage/remote-clusters/ec-remote-cluster-same-ess.md

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,6 +13,10 @@ products:
1313

1414
This section explains how to configure a deployment to connect remotely to clusters belonging to the same {{ecloud}} organization.
1515

16+
::::{note}
17+
If traffic filtering is enabled on the remote cluster, the remote cluster administrator must configure a traffic filter of type remote cluster, using either the organization ID or the Elasticsearch cluster ID as the filtering criteria. For detailed instructions, refer to [Remote clusters and traffic filtering](/deploy-manage/remote-clusters/ec-enable-ccs.md#ec-ccs-ccr-traffic-filtering).
18+
::::
19+
1620
## Allow the remote connection [ec_allow_the_remote_connection]
1721

1822
Before you start, consider the security model that you would prefer to use for authenticating remote connections between clusters, and follow the corresponding steps.
@@ -273,7 +277,6 @@ curl -X GET -H "Authorization: ApiKey $EC_API_KEY" https://api.elastic-cloud.com
273277
The response will include just the remote clusters from the same {{ecloud}} organization. In order to obtain the whole list of remote clusters, use {{kib}} or the [{{es}} API](https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-cluster-remote-info) directly.
274278
::::
275279

276-
277280
## Configure roles and users [ec_configure_roles_and_users]
278281

279282
To use a remote cluster for {{ccr}} or {{ccs}}, you need to create user roles with [remote indices privileges](../users-roles/cluster-or-deployment-auth/role-structure.md#roles-remote-indices-priv) on the local cluster. Refer to [Configure roles and users](remote-clusters-api-key.md#remote-clusters-privileges-api-key).

0 commit comments

Comments
 (0)