Skip to content

Latest commit

 

History

History
127 lines (98 loc) · 4.96 KB

akamai-eaa-connector.md

File metadata and controls

127 lines (98 loc) · 4.96 KB
Raw

< cli-eaa documentation

akamai eaa connector

Aliases: c, con

Display list of connectors and their status.

Table of contents

Usage

% akamai eaa connector -h
usage: akamai eaa connector [-h] [connector_id] {apps,list,swap,remove,rm,create,allowlist} ...

positional arguments:
  connector_id          Connector ID (e.g. con://abcdefghi)
  {apps,list,swap,remove,rm,create,allowlist}
                        Connector operation
    apps                List applications used by the connector
    list                List all connectors
    swap                Swap connector with another one
    remove (rm)         Unregister a connector
    create              Create a new EAA connector
    allowlist           Dump EAA Cloud Endpoint for Firewall/Proxy/Network Security equipement

options:
  -h, --help            show this help message and exit

Tips:

  • pipe CLI output column tool available in most POSIX environment.
  • when piping, the extra information is written to stderr so they appear seperately.

List all EAA connectors

This example shows a short command akamai eaa c, replacing akamai eaa connector list:

$ akamai eaa c | column -t -s,
Total 9 connector(s)
#Connector-id                 name                reachable  status  version     privateip      publicip        debug
con://cht3_GEjQWyMW9LEk7KQfg  demo-v2-con-1-amer  1          1       4.4.0-2765  10.1.4.206     12.123.123.123  Y
con://Wy0Y6FrwQ66yQzLBAInC4w  demo-v2-con-2-amer  1          1       4.4.0-2765  10.1.4.172     12.123.123.123  Y
con://dK0f1UvhR7i8-RByABDXaQ  demo-v2-con-4-emea  1          1       4.4.0-2765  192.168.1.90   12.123.12.12    N
con://Ihmf51dASo-R1P37hzaP3Q  demo-v2-con-3-emea  1          1       4.4.0-2765  192.168.1.235  12.123.12.12    N
con://XiCmu80xQcSWnaeQcvH8Vg  demo-v2-con-5-apj   1          1       4.4.0-2765  192.168.1.228  12.123.123.12   Y
con://pkGjL5OgSjyHoymMguvp9Q  demo-v2-con-6-apj   1          1       4.4.0-2765  192.168.1.144  12.123.123.12   Y
con://NAWSlptPSXOjq-bk2-EQPw  demo-v2-con-10-rus  1          1       4.4.0-2765  10.3.0.101     12.123.123.12   Y
con://e_0nShZBQ7esNAC3ZEkhSQ  demo-v2-con-3-amer  1          1       4.4.0-2765  10.1.4.83      12.123.123.123  Y
con://OEe9o-n2S_aMeZpLxgwG0A  tmelab-sfo          1          1       4.4.0-2765  192.168.2.101  12.123.123.12   Y

To integrate connector health into your monitoring system, use the --perf option. akamai eaa c list --perf This provides 7 extra columns:

  • CPU usage (%)
  • Memory usage (%)
  • Network Traffic (Mbps)
  • Total of dialout connections
  • Idle dialout connections
  • Active dialout connections

To correlate with applications served by each connector, use the --showapps argument to include a list of the application FQDNs as an array in the JSON response.

Swapping connectors

If you are doing a maintenance on an hypervizor, you may need to swap out 2 connectors. The current implement look for all the apps, add the new connector, remove the old one. The application is marked as ready to update.

Caveats (let us know if you need it):

  • This doesn't perform swap for directory
  • There is no option to automatically redeploy the impacted application after the swap

Example:

$ akamai eaa connector con://e_0nShZBQ7esNAC3ZEkhSQ swap con://cht3_GEjQWyMW9LEk7KQfg
#Operation,connector-id,connector-name,app-id,app-name
+,con://cht3_GEjQWyMW9LEk7KQfg,demo-v2-con-1-amer,app://nSFDNGYARHeZGNlweIX7Wg,Speedtest (v2.1)
-,con://e_0nShZBQ7esNAC3ZEkhSQ,demo-v2-con-3-amer,app://nSFDNGYARHeZGNlweIX7Wg,Speedtest (v2.1)
Connector swapped in 1 application(s).
Updated application(s) is/are marked as ready to deploy

Show connector outbound allowlist IP/CIDR or hostnames

By default the command will generate a CSV on stdout with the following fields:

  • Service name
  • Location
  • Protocol/Port
  • IP/CIDR
  • Last time the item was added/updated (RFC 3339)
  • Number of apps consuming the Data Path + Location, requires --used

The first row is the CSV header

If --fqdn is used, will display only the hostname (some may come with wildcard) for Layer-7 capable security equipement such as HTTPS/TLS web proxies.

List of Akamai Cloud Service Endpoints by IP/CIDR

% akamai eaa connector allowlist

List of Akamai Cloud Service Endpoints by hostnames

% akamai eaa connector allowlist --fqdn

Create a new connector

The command below will create a new connector for Docker and wait a maximum of 10 minutes to get the download URL. The response will be a JSON doc. The download_url attribute MUST BE tested as it can be null even with the --wait option.

% akamai eaa create --name MyNewConnector --package Docker --debug --wait 600