Understanding the external network access in Diego


Lev Berman <lev.berman@...>
 

Hello, everyone!

I have a Diego application. From the app's Garden container I can access
the Internet and establish connections with tcp services running on other
VMs but I can't connect to a tcp service running on the same VM until I
allow the container to access external networks via the Garden API -
https://github.com/cloudfoundry-incubator/garden/blob/master/doc/garden-api.md#allow-a-container-to-access-external-networks-and-ports.
Also, I've created CF security groups to allow tcp traffic for all VMs I am
trying to connect to.

My questions are is this an expected functionality and what is the idea of
the "allow the container to access external networks" API call since it
only affects access to the same VM?

Thanks!

--
Lev Berman

Altoros - Cloud Foundry deployment, training and integration

Github
*: https://github.com/ldmberman <https://github.com/ldmberman>*

Join cf-dev@lists.cloudfoundry.org to automatically receive all group messages.