Deploying Web Access with a GCP Public IP

Prev Next

This guide is intended for IT infrastructure architects and DevOps professionals responsible for deploying or enabling Web Access on Google Cloud Platform (GCP).

This guide applies to Nasuni Edge Appliance 10.1 and higher.

Introduction

To enable access to Web Access through the public internet, the Web Access appliance can be assigned a static Public IP address in GCP.  This is the simplest solution to providing Web Access to external users.

Web Access can also be deployed behind an application load balancer (ALB). An ALB can offload encryption/decryption, simplify TLS/SSL certificate management, and integrate with other services to enhance security and performance. For information on setting up a GCP application load balancer, see Deploying Web Access with GCP HTTPS Load Balancer.

Prerequisites

  • An Edge Appliance must be deployed to GCP and joined to the NMC.

  • A public FQDN for your instance and corresponding SSL/TLS server certificate.

  • Access to DNS to set up the FQDN.

Static IP assignment

To configure the static IP address, follow these steps:

  1. Navigate to https://console.cloud.google.com/.

  2. Click the navigation menu ☰ → VPC Network → IP Addresses.

  3. Click Reserve external statis IP address.

  4. Use the Name field to assign a name.

  5. (Optional) Enter a Description.

  6. Choose a Network Service Tier.

  7. Set the IP version to IPv4.

  8. Set the Type to Regional.

  9. Use the Region drop-down to select the region containing the NEA Web Access instance.

  10. Use the Attached to drop-down to select the NEA Web Access instance.

  11. Click Reserve.

Verification

To verify, follow these steps:

  1. Click the navigation menu ☰ → Compute Engine → VM Instances.

  2. Click the Web Access Instance.

  3. Scroll down to Firewalls and confirm that HTTP traffic and HTTPS traffic are set to On.

  4. Confirm that the External IP address is the assigned static IP address.

  5. Click the IP address and ensure that the Web Access page loads.

FQDN and Certificates

The static IP address is used to register a record with the customer's DNS to provide an FQDN.

Install a certificate on the Web Access instance to allow browsers to trust the Web Access FQDN - Web Access - SSL Certificates.