TLS for EFS mounts in 2 different regions on a single instance

0

There seems to be a limitation on the helper in amazon-efs-utils that configures stunnel for EFS for you. It doesn't appear as though it supports 2 different regions simultaneously so that it is not possible to mount two different EFS stores using TLS in two different regions on the same EC2 instance. It appears as though the config file at /etc/amazon/efs/amazon-efs-utils.conf is only configurable for a single region Is that right? Is there a workaround for it? Do I have to manually configure stunnel for it to work?

Edited by: proca on Feb 17, 2019 9:39 PM

proca
已提問 5 年前檢視次數 467 次
2 個答案
0

Ok - just FYI for your roadmap, the reason I am trying to do this is cross-region backup for EFS. Its basically a custom implementation of AWS's recommended approach by using cloudformation to do cross-region EFS backups where it spins up an EC2 instance and copies between the EFS stores.

So you are saying that I am going to have to configure stunnel myself to get this working. I'll take a look at that github repo to see how hard it would be to add support for my use case first. Thanks for the info.

proca
已回答 5 年前
0

The EFS mount helper currently supports mounting EFS file systems located in the same region as your EC2 instance. Mounting file systems in other regions is not currently supported by the mount helper - please note that you are responsible for network charges when mounting EFS file systems across AWS regions.

Thanks for the feedback - we'll consider it as part of our roadmap. In the meanwhile, the mount helper is open-source (https://github.com/aws/efs-utils) if you'd like to submit a pull request to enable this functionality. The area of the code that defines region lookup is found here: https://github.com/aws/efs-utils/blob/master/src/mount_efs/init.py#L119

Edited by: JoeTatAWS on Feb 18, 2019 12:15 PM

AWS
已回答 5 年前

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南