Important Nexla Help Center Update:
Nexla's Zendesk Help Center pages are being deprecated and will soon no longer be available.
Nexla Documentation is now the home for Nexla's User Guides, with improved formatting and categories that are easier to navigate, providing a better overall user experience.
Please update any bookmarks to the new Nexla Documentation site (docs.nexla.com/user-guides).
_______________________________________________
If your database is not publicly accessible, Nexla enables connecting via a SSH tunnel. In this method Nexla would connect to a bastion host via SSH and the database connection would happen from the SSH host.
For an additional layer of security, you can whitelist the following Nexla’s IP addresses.
34.231.167.112, 54.209.27.1
Reach out to Nexla support (support@nexla.com) if you have questions.
1. SSH Tunnel Host set up
To connect via an SSH tunnel, you need to use a bastion host running SSH tunnel server that has access to your database. The tunnel server's SSH port needs to be accessible from Nexla’s IP. You’ll also need to create an SSH user for Nexla. To create a SSH user follow the steps.
Create SSH user
Login to your SSH tunnel host and run the following commands:
Create group Nexla
sudo groupadd nexla
Create user Nexla
sudo useradd -m -g nexla nexla
Switch to the Nexla user
sudo su - nexla
Create the .ssh directory
mkdir ~/.ssh
Set permissions
chmod 700 ~/.ssh
Change to the .ssh directory
cd ~/.ssh
Create the authorized_keys file:
touch authorized_keys
Set permissions
chmod 600 authorized_keys
In a text editor, add the below public SSH key to the authorized_keys file. The key must be all on one line. Make sure that you don’t introduce any line breaks when cutting and pasting.
ssh-rsa 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 avinash@Avinashs-MacBook-Pro-2.local
2. Nexla Setup for SSH tunnel
Follow steps 1-3 in Connect to Database. You will see this for Advanced Settings.
To Connect via SSH tunnel:
- Enter the SSH tunnel hostname or IP address (as set up in Step 1 above)
- Enter the SSH tunnel port (Default is 22)
- Username for tunnel as created in step 1 above (Default is nexla)
Follow the rest of the steps in Connect to Database to finish connecting to a database.
Comments
0 comments
Please sign in to leave a comment.