Common IaaS Configurations

The following are the common configurations that should be configured in the IaaS.

• Key pairs 
  Create a Key Pair in the IaaS and thereafter, download and save the private key. 
  Set permission: chmod 0600 
  
• Security groups

  Create a security group with the following ports enabled.

  Port#	Port Description	Suggestions for Access Restrictions
  Common Ports
  22	SSH port. Clients will use this port to ssh into the EC2 instance	Open to outside access
  Cartridge Security Group
  80	Apache http port. Non-Carbon Cartridge instances would use this port to expose non-Carbon applications (http)	Restricted internal access
  443	Apache https port. Non-Carbon Cartridge instances would use this port to expose non-Carbon applications (https)	Restricted internal access
  3306	MySQL port. MySQL Cartridge instances would use this port to expose MySQL service.	Restricted internal access
  4100	Clustering port of Carbon instances	Restricted internal access
  9443	Default https. Default https port of a Carbon server.	Restricted internal access
  9444	Carbon Cartridge https port	Restricted internal access
  9763	Default http. Default http port of a Carbon server.	Restricted internal access
  9764	Carbon Cartridge http port	Restricted internal access
  S2 Security Group
  8280	ELB http proxy port. One of two http ports of ELB and clients would access service cluster nodes via this port	Open to outside access
  8243	ELB https proxy port. One of two https ports of ELB and clients would access service cluster nodes via this port.	Open to outside access
  8290	ELB http proxy port. One of two http ports of ELB and clients would access service cluster nodes via this port.	Open to outside access
  8253	ELB https proxy port. One of two https ports of ELB and clients would access service cluster nodes via this port.	Open to outside access
  9445	SC https port. Clients would access Stratos Controller via this port.	Open to outside access
  5001	SC clustering port. Tribes clustering port of Stratos Controller.	Restricted internal access
  4000	ELB clustering port. Tribes clustering port of ELB.	Restricted internal access
  9447	CartridgeAgentService https port	Restricted internal access
  8140	Puppet master port	Restricted internal access
  7714	BAM port	Restricted internal access
  9163	BAM cassandra port	Restricted internal access
  9446	Management console port of BAM server.	Open to outside access
  8291	GitBlit http port	Open to outside access
  8443	GitBlit https port	Open to outside access