GCP Virtual Private Network (VPC) Peering Setup Guide

Scylla Cloud allows you to connect your application’s private network directly to the Scylla clusters’ private network by using GCP’s VPC peering. For more information on GCP’s VPC peering and its security advantages, please read the VPC Networking Overview.

If you are running Scylla Cloud on AWS, refer to these instructions.

Caution

  • VPC peering is set only at the cluster creation stage and cannot be configured on an existing cluster.

  • VPC peering is a mandatory setting for multi Data Center (DC) deployments.

Set up VPC Peering on Scylla Cloud with GCP

The procedure that follows includes instructions for setting up Virtual Private Cloud (VPC) peering to connect your Scylla Cluster to your application on Google Cloud Platform (GCP). This will require you to have access to your instances on GCP and to create a cluster with VPC peering in Scylla Cloud.

Before You Begin

Verify that you have access to your GCP Console, and your user has view/edit permissions for the VPC Peering settings.

Workflow

  1. Launch a Scylla Cloud Cluster on GCP with VPC Peering Enabled

  2. Configure the VPC Details on Scylla Cloud

  3. Configure the VPC Peering Route

Launch a Scylla Cloud Cluster on GCP with VPC Peering Enabled

Procedure

  1. Sign into Scylla Cloud. If you don’t have an account you can register here.

  2. From the right-side menu, click Add New Cluster

  3. In the Provider section, select Google Cloud.

  4. In the Where to Deploy section, choose Scylla Account.

  5. In the Details section, enter the following information:

    • Cluster Name - human-readable text to help you identify your cluster.

    • Allowed IPs - list the IP addresses you want to permit to connect to your cluster.

  6. Select Enable VPC Peering.

  7. In the Cluster Network field, enter your cluster’s network IP address. By default, the cluster’s IP/CIDR is displayed. You can change it to a different IP/CIDR.

  8. Scroll down the page and continue with the cluster creation process. Choose the type of instances you want to use, the number of nodes, the RF, and any other additional features you want to purchase.

  9. When you’re finished choosing all the options you want, click Launch Cluster.

  10. It will take a few minutes for your cluster to launch. When it is ready you will see a large green checkmark. At the bottom of the screen, click Setup VPC Peering. The VPC Peering wizard will open and you can complete the VPC Peering setup

Configure the VPC Details on Scylla Cloud

This procedure is done only after you have successfully launched a cluster as described in Launch a Scylla Cloud Cluster on GCP with VPC Peering Enabled

Procedure

  1. On the GCP Details page, fill in the fields as follows:

    • GCP Project ID - enter your GCP Project ID. If you don’t know your ID, the instructions on how to locate it are here.

    • VPC Network Name - Enter the network you would like to use under the same project

    • VPC Network - enter the network block of your VPC in CIDR format. This allows us to correctly route to your VPC. The IP must not intersect with the IP/CIDR you’ve set on Cluster creation (default is: 172.31.0.0/16). If there are multiple CIDR blocks in your VPC, list them all separated by commas. From the GCP Network - identify the network IP/CIDR you would like to use under the same Project

  2. Click Submit VPC Peering Request.

Locate the GCP Project ID

To locate the GCP Project ID, navigate to the GCP Dashboard and choose your project from the dropdown menu. Copy the GCP Project ID.

Configure the VPC Peering Route

This procedure requires you to access the VPC Peering console on GCP and complete the Peering setup. You have 2 options to configure VPC Peering:

Manual Setup with a GCP Console

Procedure

  1. Access the GCP VPC network Peering console

  2. Click Continue.

    Note

    Remember to use the same Project ID which you entered in Configure the VPC Details on Scylla Cloud.

  3. Fill in the remaining required fields:

    • Name - your VPC Peering name

    • Your VPC network - choose your GCP Network from the drop-down menu

    • Peered VPC network - choose in another project.

    • Project ID - enter the Scylla Cloud GCP Project name: <Scylla_Project_Name>

    • VPC Network name - enter Scylla Cloud VPC network name <Scylla_Cluster_VPC_ID>

  4. Leave all other settings as they are.

  5. Click Create.

Run the GCP CLI

Do not use this method if you already completed the Manual Setup with a GCP Console.

Procedure

An alternative way to Configure VPC Routing is to run the following GCP CLI with your values.

gcloud compute networks peerings create [peering name] --network [your network name] --peer-network [URI} --project=[your project name] --peer-project [Project_name]

Confirm Connectivity

This procedure gives you some ways to test the VPC Peering between Scylla Cloud and your GCP instances

Test connectivity of your VPC: from a VM instance within the VPC network, try to connect to port 9042 with nc, telnet, or cqlsh (the required credentials are on the Cluster page):

For example, with nc:

nc -z 198.51.100.0 9042 && echo ok!

Using the telnet command, telnet to the IP address

telnet 198.51.100.0