When a data plane cluster runs in a virtual private cloud (VPC) that cannot communicate with the VPC of your Service Mesh (ASM) instance, the control plane and data plane have no network path between them. Associate an elastic IP address (EIP) with the control plane to expose the ports of the control plane over the Internet, allowing remote data plane clusters to reach the control plane. Disassociate the EIP when Internet access is no longer needed.
Prerequisites
Before you begin, make sure that you have:
An ASM instance
An idle EIP. To create one, see Apply for an EIP
Associate an EIP in the ASM console
In the ASM console, click the target instance name to open the ASM instance management console.
In the left-side navigation pane, choose ASM Instance > Base Information.
In the Basic Information section, click Bind EIP next to Istio Pilot Endpoint. To replace an existing EIP, click Replace EIP instead.
In the Bind EIP dialog box, select an idle EIP from the Select an existing EIP drop-down list and click OK.
Disassociate an EIP in the ASM console
After disassociation, the control plane is no longer reachable from the public Internet. Make sure that the data plane cluster has an alternative network path, such as VPC peering or a VPN connection.
In the ASM console, click the target instance name to open the ASM instance management console.
In the left-side navigation pane, choose ASM Instance > Base Information.
In the Basic Information section, click Unbind EIP next to Istio Pilot Endpoint.
In the Unbind EIP dialog box, click OK.
Associate or disassociate an EIP by using the API
Use the ModifyPilotEipResource operation to manage the EIP association programmatically. You can call this operation in OpenAPI Explorer.
Associate or replace an EIP
Prepare an idle EIP. If you do not have one, see Apply for an EIP.
Call the
ModifyPilotEipResourceoperation with the following parameters:Parameter Value ServiceMeshId The ID of the ASM instance Operation BindEip EipId The ID of the EIP If an EIP is already associated with the control plane, this call disassociates the existing EIP and associates the specified one.
Disassociate an EIP
Call the ModifyPilotEipResource operation with the following parameters:
| Parameter | Value |
|---|---|
| ServiceMeshId | The ID of the ASM instance |
| Operation | UnBindEip |
| EipId | Do not specify this parameter |
What to do next
If Internet exposure is temporary, set up VPC peering or a VPN connection for long-term private connectivity, and then disassociate the EIP.