If you want to manage the servers that reside on different networks or the servers that cannot communicate with bastion hosts in virtual private clouds (VPCs) in a centralized manner, we recommend that you use the network domain feature of Bastionhost. You can configure a proxy server for these servers, create a network domain in the Bastionhost console, and then connect the network domain to the proxy server. This way, you can use the proxy server to maintain other servers. This topic describes how to use the network domain feature.

Background information

The network domain feature provides the optimal O&M solutions for hybrid cloud scenarios. For example, you can use the feature to maintain servers across data centers, heterogeneous clouds, and VPCs. In most cases, the servers of an enterprise reside in different regions and may fail to communicate with a bastion host. To resolve this issue, you can use public IP addresses or leased lines to connect to the servers. However, public IP addresses may pose security risks while leased lines cause high network costs. In this case, we recommend that you use the proxy mode of the network domain feature to centrally maintain the servers that reside on different networks. The proxy mode is supported by Bastionhost HA Edition. The servers include those in a data center, a heterogeneous cloud, and different VPCs.

Limits

  • The proxy mode of the network domain feature is available only in Bastionhost HA Edition.
  • The network domain feature supports SSH, HTTP, and SOCKS5 proxies.

Create a network domain

To use your bastion host to maintain multiple servers in a network domain, you must create a network domain for the bastion host and connect the network domain to a proxy server.

  1. Log on to the Bastionhost console.
  2. In the left-side navigation pane, choose Assets > Network Domain.
  3. On the Network Domain page, click Create Network Domain.
  4. In the Create Network Domain panel, specify the Network Domain, Remarks, and Connection Mode parameters.
    You can select Direct Connection or Proxy for the Connection Mode parameter.
    Note Bastionhost Basic Edition and HA Edition support different connection modes.
    • Bastionhost Basic Edition supports only the direct connection mode.
    • Bastionhost HA Edition supports the direct connection mode and the proxy mode.
    If you select Proxy , you must configure at least one proxy server. The network domain feature allows you to configure a primary proxy server and a secondary proxy server. You can configure a secondary proxy server in the same manner in which you configure a primary proxy server. The following example shows how to configure a primary proxy server:
    1. Click Create Proxy Server in the Primary Proxy Server section.
    2. In the dialog box that appears, configure the following parameters. Configure a proxy server
      Parameter Description
      Proxy Type The type of the proxy. Valid values:
      • SSH Proxy
      • HTTP Proxy
      • SOCKS5 Proxy
      Server Address The address of the primary proxy server.
      Server Port The port of the primary proxy server.
      Host Account The account of the primary proxy server.
      Password The password of the account for the primary proxy server.
    3. Optional. Repeat the proceeding steps to configure the secondary proxy server.
      Note The network domain feature supports two proxy servers: primary proxy server and secondary proxy server. If an error occurs on the primary proxy server, the secondary proxy server is automatically connected to your bastion host. To ensure the stability of the network domain, we recommend that you configure a secondary proxy server.
    4. Click Test Connection.
      Note If the connectivity test fails, check whether the parameters are correctly configured.
    5. Click OK.
  5. Click Create Network Domain. The system displays the message "The network domain text1 is created."
    You can click Associate Host below the message to add the hosts that you want to maintain to the network domain. For more information, see Add hosts. Network domain is created

Add hosts

After you create a network domain, you can add hosts to the network domain.

  1. Log on to the Bastionhost console.
  2. In the left-side navigation pane, choose Assets > Network Domain.
  3. On the Network Domain page, find the network domain to which you want to add hosts.
  4. Click Add Host in the Actions column.
  5. In the Add Host dialog box, find the host that you want to add to the network domain and click Add Host in the Actions column.
    You can also select multiple hosts that you want to add to the network domain and click Add Host below the host list to add the selected hosts at a time.

Edit a network domain

You can edit the basic information about a network domain. You can also add hosts to or remove hosts from a network domain.

  1. Log on to the Bastionhost console.
  2. In the left-side navigation pane, choose Assets > Network Domain.
  3. On the Network Domain page, find the network domain whose information you want to edit.
  4. Click Edit in the Actions column.
  5. On the Network Domain Details page, modify the information on the Basic Info and Host tabs.
    • On the Basic Info tab, you can change the values of Network Domain, Connection Mode, and Remarks. You can also edit and test the connectivity to the primary and secondary proxy servers.
    • On the Host tab, you can add or remove hosts.

What to do next

After you connect your bastion host to the servers in a network domain by using the network domain feature, you must authorize hosts for your bastion host to maintain the servers in the network domain.