Connect out from SingleStore Helios Workspaces to Private Networks/Services via Google Private Service Connect
On this page
For outbound connections, you'll send the service attachment to SingleStore.
To create outbound connections from SingleStore Helios to private networks/services (not accessible from the Internet, like Kafka) for tasks like ingesting data via pipelines perform the following tasks:
-
Obtain a project name from SingleStore.
-
Create a Network Load Balancer (NLB).
-
Publish the Service.
-
Send the Service Attachment to SingleStore.
Obtain a Project Name from SingleStore
Contact SingleStore Customer Support (see Support FAQ) and obtain a project name for the service you are going to create.
-
Workspace ID.
SingleStore can only process the connection request when your workspace is in the Active
state. -
Region details
-
Request a project name from SingleStore
-
In the support ticket, specify that the request is for outbound connection
You'll need to whitelist this project name while creating the service later.
Create a Network Load Balancer
-
In the GCP console, select Networking > Networking Services > Load Balancing > Create load balancer.
-
Under TCP Load Balancing, select Start configuration.
-
Under Internet facing or internal only, select Only between my VMs and Single region only.
-
Under Backend type, select Backend Service.
Select Continue. -
On the New TCP load balancer screen, enter a Name for the Network Load Balancer.
-
Select Backend configuration, enter the Region and Network information, and then add your service's Instance group.
Note
If you do not have an Instance group yet, but you do have a running service, select GCP Console > Compute Engine > Instance groups > Create Instance Groups to create an instance group.
If you already have an instance, but do not have a group, you may want to create an unmanaged group to which you can add existing instances. See Creating groups to create an unmanaged instance group. -
Fill out the Backend and Frontend configurations and then click Create.
For more NLB configuration related information, see Configuring Load Balancer.
Once you have an NLB, you can test it.curl
with the Network Load Balancer's IP and Port from within the VPC to verify that the connection is established.
$ curl <ADDRESS_OF_THE_NLB>:<port>
Publish the Service
When you publish a service, you create a service attachment.
-
In the GCP Console, select Networking > Network Services > Private Service Connect > Published Services > Publish Service.
-
Under Load balancer type, select Internal TCP/UDP Load Balancer.
-
Add the project name you received from SingleStore to the whitelist for your Service.
-
Enter the necessary details and create a subnet if needed.
See Publish a Service for more information. Do NOT enable Use Proxy Protocol. -
Select Add service.
For more information, see Publish Services using Private Service Connect.
Send the Service Attachment to SingleStore
Contact SingleStore Support and provide the Service Attachment.
-
On the Google Cloud console, go to the Private Service Connect page.
-
On the Published Service tab, select the service you just created.
Open the Private Service Connect service details screen. -
Send the Service attachment information to SingleStore Support.
Service attachment names usually have the following format: projects/<SERVICE_
.PROJECT>/regions/<REGION>/serviceAttachments/<SERVICE_ NAME>
Last modified: February 28, 2024