Connect to manager node via SSH

Prev Next

Available in Classic

You can connect to the manager node of a Search Engine Service cluster via SSH.

Caution

NAVER Cloud Platform is not responsible for any issues or service disruptions caused by actions you perform after connecting to the cluster via SSH.

Follow these steps to connect via SSH.
1. Configure manager node ACG
2. Connect to manager node via SSH

1. Configure manager node ACG

Configure ACG rules to allow access to the manager node.

Note

This section describes only the settings required for SSH access. For more information on ACG, see ACG user guide.

  1. In the Classic environment on the NAVER Cloud Platform console, navigate to i_menu > Services > Big Data & Analytics > Search Engine Service.
  2. Click the Cluster menu.
  3. Select the cluster for SSH access, check the manager node ACG, then click i-ses-window.
  4. Select the manager node ACG identified in the previous step, then click [Set ACG].
  5. In the [Inbound] tab, add the following ACG rules, then click [Add].
    • Protocol: Select TCP.
    • Access source: Click [myIp] and enter your public IP address.
    • Allowed port: Enter 22.
  6. Click [Apply].
Caution
  • Allowing access to the entire Internet (IP address: 0.0.0.0/0) can pose serious security risks and may affect cluster tasks.
  • Automatically created rules are required for managing Search Engine Service. Deleting or modifying these rules may impact cluster operation.

2. Connect to manager node via SSH

You can access the manager node directly via SSH from outside the network.

  • An cluster authentication key (.pem file) configured is required.
    • If you lose the authentication key, you can reset it from Search Engine Service > Cluster > Manage server access > Change authentication key for direct cluster access.

To connect to the manager node via SSH based on your operating system:

For MacOS or Linux

To connect to the manager node via SSH on macOS or Linux:

  1. Launch a terminal.
    • For macOS: Application > Utilities > Terminal.
    • For Linux: Application > Accessories > Terminal.
  2. Run the following command to move to the directory where the authentication key file is located (/path).
    cd /path
    
  3. Run the following command to restrict access to the authentication key file (key.pem).
    chmod 400 key.pem
    
  4. Run the following command.
    ssh -i /path/key.pem sshuser@"manager node public IP address”
    
    • Manager node public IP address: From the Cluster menu in the console, view the manager node public IP address for the selected cluster.
  5. When a security prompt appears, enter yes to connect to the manager node.

For Windows

PuTTY does not natively support the authentication key format (.pem) generated by Search Engine Service. You must convert the key to a PuTTY-compatible format (.ppk)before connecting to the server.

Convert authentication key

To convert a .pem file to a .ppk file using PuTTYgen, which is provided with PuTTY:

  1. Run PuTTYgen.
  2. Click [Load], select the authentication key file (.pem), then click [Open].
    • To locate the .pem file, select the option to show all file types.
      ses-ssh-classic_puttygenload
  3. In Type of key to generate, select RSA and click [Save private key].
    ses-ssh-classic_puttygensave
  4. If a warning appears about saving the key without a password, click [Yes], then save the file with the same name as the original key.
    • The .ppk file extension is added automatically.

Connect to the server

To connect to the server using the converted authentication key:

  1. Run PuTTY.
  2. In Category, navigate to Connection > SSH > Auth.
    ses-ssh-classic_puttyauth
  3. Click [Browse].
  4. Select the converted authentication key file (.ppk), then click [Open].
  5. In Category, click Session.
  6. Enter the server access details.
    ses-ssh-classic_puttyconnect
    • Host Name (or IP address): Enter 'sshuser@manager node public IP address'.
      • Manager node public IP address: From the Cluster menu in the console, view the manager node public IP address for the selected cluster.
    • Port: Enter 22.
    • Connection type: Select SSH.
  7. Click [Open] to connect to the manager server.