ibm-cloud-docs / cloud-object-storage

cloud-object-storage
15 stars 46 forks source link

Add clarity to the meaning of "VPC-zone underlay IP addresses" on our public documentation for COS #139

Closed turcanboss closed 1 year ago

turcanboss commented 2 years ago

Doc link: https://cloud.ibm.com/docs/cloud-object-storage?topic=cloud-object-storage-setting-a-firewall#setting-a-firewall

"Unclear" statement:

"Node: Access from a VPC environment can pass allowed_network_type checks, and VPC-zone underlay IP addresses can be added to the allowed_ip list. It is not possible to restrict access to an overlay IP for an individual VSI."

Question: What does "VPC-zone underlay IP addresses" refer to - is it a VPC VPE GW endpoint IP? If so - pls reformulate the working or add additional clarifications

Ref - customer case: CS2634276 Thank You