About Hybrid Bridges

• Create a Hybrid Bridge
• Get information about your Hybrid Bridges
• Delete a Hybrid Bridge

A bridge allows a VPC (Virtual Private Cloud) to communicate with managed services through a private connection. The VM (Virtual Machine) of the VPC connected through a bridge can access the managed services.

General information

The available managed services are:

• PostgreSQL;
• Kubernetes;
• container registry (Container Registry).

Once a bridge is established between a VPC and a managed service, that same VPC will have access to all the managed services of the space.

warning

A bridge between a VPC and a managed service whose IP ranges overlap cannot be created.

warning

The managed service must be exposed privately (only on the internal network) in order to communicate with a VPC through a bridge.

A bridge is a private connection that uses private IP.

The VPC and the managed services must belong to the same space.

Once the bridge is created, network traffic between the VPC and the managed services becomes possible. You must update the route tables by adding a route, and the security groups to allow the traffic.

Bidirectionality

Traffic is bidirectional between the VPC and the managed services, except for Kubernetes: the containers of the worker nodes of a managed cluster Kubernetes can access the VPC, but a VM of the VPC cannot reach a container of the cluster Kubernetes through the bridge.

Network configuration

Route tables

To allow traffic between the VPC and the managed services, you must update the route tables associated with the subnets of the VPC.

Once the bridge is created, you can view it in read-only mode through the API to find out the routes associated with it. These routes must be configured in your route table as follows:

• the ipRange as the destination;
• the gatewayId as the target.

This allows the VM to direct traffic to the managed services.

Security Groups

warning

To allow traffic between the VM of the VPC and the managed services, you must update the security groups associated with your VM.

Add the appropriate rules allowing outbound flows to the managed services, and inbound flows from the managed services if necessary.

Connecting to managed services from a VPC

Once the bridge connection is established, the VM of the IaaS VPC can reach the connected managed service or services through the host of the managed service.

To retrieve the host of a managed service:

• Retrieve the status of a PostgreSQL cluster;
• Retrieve the status of a cluster Kubernetes;
• Retrieve the status of a Container Registry.