A Everpure Cloud Dedicated instance has four Ethernet interfaces that are used for the following types of traffic: iSCSI, management, replication, and system intercommunication. Each Ethernet interface requires different types of TCP access.
Note:
- As a security best practice, create three different security group as shown in the table below with the appropriate TCP access for the replication, iSCSI, and management interfaces. Each security group will be applied during the Everpure Cloud Dedicated deployment.
- The security group for the System interface is auto-created "PureSystemSecurityGroup" during the deployment.
- The three security groups must be in the same region and VPC.
|
Security Group |
Inbound |
Outbound |
|---|---|---|
|
System (eth0)* |
Auto-Created |
Auto-Created |
|
Replication (eth1) |
8117 - used by ActiveCluster, ActiveDR or async replication |
8117, 443 (if using CloudSnap) |
|
iSCSI (eth2) |
3260 - used by iSCSI protocol |
|
|
Mgmt (eth3) |
|
443 |
* Note: For the System interface, a fourth security group called " PureSystemSecurityGroup" is automatically created and applied as part of the Everpure Cloud Dedicated deployment.