Satellite Connector FAQ
Does Satellite Connector support Cloud Endpoints?
Yes, Satellite Connector supports both Location and Cloud endpoints. For more information, see Creating Connector endpoints in the CLI.
How can I restrict access to my location endpoints?
You can set up ACL rules to restrict access to your endpoints. When you create your link endpoint, select an existing ACL rule or create a new ACL rule to control which clients can access location endpoint resources. If no ACL rule is selected, any client that is connected to the IBM Cloud private network can use the endpoint to connect to the destination resource that runs in your location.
How can I restrict the Connector Agent access on my network?
Use any standard firewall in your location to restrict the endpoints on your network that are accessable to the Connector Agent. On Windows, for example, you can configure Windows firewall to allow the agent to only access the specific set of endpoints needed by your application. However, when using a firewall, make sure the firewall also allows access to the required endpoints described in network requirements.
I created an ACL for my Connector, why doesn't it take effect?
Make sure you apply the ACL to the endpoint you want to use it against.
What IAM permissions do I need for Connectors?
To create a Connector, you need Administrator Platform role for Satellite. To connect an Agent to an existing Connector, you need Viewer Platform role for Satellite.
How many Connectors are supported per account per region?
You can have a maximum of 25 Connectors per account per region.
How many endpoints are supported per Connector?
cloudendpoints- 1000 total. For example, you might create up to 650 TLS endpoints and 350 HTTP endpoints through which clients in your location can connect to resources outside of the location network.
locationendpoints- 25 total. For example, you might create up to 20 TLS endpoints and 5 HTTP endpoints through which clients outside of your location network can connect to resources inside the location.
How many instances of Connector agent can I run?
As a best practice, run no more than 6 agents per Connector.
Can I deploy Satellite Connectors within IBM Cloud?
Connectors are generally not recommended for use within IBM Cloud except for specific use cases. Contact your IBM account team if you believe you need this support for your solution.