In situations where your workload needs to consume services from endpoints within a VPC or another private network, you would use a wormhole agent.
Control Plane's wormhole technology securely connects your workloads to any TCP or UDP endpoints in VPCs and other private networks, including on-prem data centers and even on a developer's laptop. You establish a wormhole by running an agent VM (agent for short) inside the private network to which you are connecting your workloads.
Control Plane offers agents for both private networks and cloud providers. The agent is installed and configured within the location where it can access the applications or services that your workload requires. It does this by establishing a secure and persistent connection to publicly hosted Control Plane servers. Requests from your workload are tunneled to the agent which performs the request and then tunnels the response back. This flow occurs in a performant manner and is transparent to the workload.
Agents are scoped to an org and are used in conjunction with identities to set up network resources.
Visit one of the links below for a step-by-step guide on how to create an agent with a specific provider:
Agents run in active-passive mode. If an active agent misses a set amount of heartbeats, it is considered offline and replaced by a redundant agent.
The recommended method to configure a highly available agent deployment is by using an instance group (also called an autoscaling group on AWS or a VMSS/virtual machine scale set on Azure).
The autoscaling group template must be configured in the same way as a single VM in terms of cloud configuration, network settings, etc. As the agent's functionality is not CPU intensive, that metric cannot be used to scale instances up and down. Instead, use a fixed sized group set to a minimum of 2 and a maximum of the number of zones used within your infrastructure.
When utilizing an agent, the machine type running the agent affects the bandwidth and latency exhibited by the agent.
The tables below are provided to help guide your agent machine type selection.
Tests were performed using qperf. The qperf client was configured as a container workload running on the Control Plane platform and deployed in the same region as the qperf server running on a virtual machine.
Based on the results below, select an agent type suitable for your performance requirements.
|Agent Instance Type||Average Bandwidth (MB/sec)||Average Latency (us)|
|Agent Machine Type||Average Bandwidth (MB/sec)||Average Latency (us)|
The permissions below are used to define policies together with one or more of the four principal types:
|create||Create new agents|
|delete||Delete service agents|
|edit||Modify existing agents||view|
|manage||Full access||create, delete, edit, manage, use, view|
|use||Use an agent in an identity||view|
Displays the permissions granted to principals for the agent.
To view the CLI documentation for an agent, click here