Closed yingca1 closed 1 year ago
intra_control_net
and intra_data_net
are only for internal communication and you need not expose them externally.
To be able access data outside your cluster, you can set and it should work without any issue on GKE:
spec:
...
enableExternalLB: true
enableExternalLB: true
No problem doing it this way, but I'm just wondering if we could expose fewer public IP+ports since we have a proxy. Why not handle all external requests through the proxy-lb?
performance. The answer is, performance and scalability. Of course, we could proxy back and forth and reverse all day long. But the whole premise of aistore is different. No extra hops, not metadata servers - linear scale.
Can we access the content directly through the public address of the proxy LB endpoint, instead of being redirected to the PublicNet service port of the target node with a 301 when using
ais object get <object-uri>
?If I want to proxy public network access to a target node through Ingress, do I only need to handle the
public_net
in all endpoints of the target node? dointra_control_net
andintra_data_net
not need to be exposed to the public network?