[Cloud Manager] Domain name and SSL certificate for a replicat set

[EM]

Hi,

I deployed a replica set on AWS with Cloud Manager with three mongodb server instances.

On AWS, each EC2 instance has a public domain name and a public IP like this:

• ec2-d1-c1-b1-a1.compute-1.amazonaws.com points to IP1
  
• ec2-d2-c2-b2-a2.compute-2.amazonaws.com points to IP2
  
• ec2-d3-c3-b3-a3.compute-3.amazonaws.com points to IP3
  

When I look into the Cloud Manager, the hotnames of my server are:

• mdb-0.group-name.1234.mongodbdns.com points to IP1
• mdb-1.group-name.1234.mongodbdns.com points to IP2
• mdb-2.group-name.1234.mongodbdns.com points to IP3

I own a domain name like example.com, and I want to generate an SSL certificate for this domain to configure SSL on mongodb. But this certificate will be generated for an example.com domain name, and not *.mongodbdns.com. Where, into the Cloud Manager, should I specify to use my own domain names *.example.com instead of *.mongodbdns.com?

Should I also use an Elastic IP for each EC2 instances, and let my domain names *.example.com point to them?

Thank you.

[EM]

Hi,

I try to migrate my database from Parse.com on AWS with Mongodb Cloud Manager, and I'm definitely stuck with the SSL configuration. Is there a documentation that shows you how to configure your replicat set with the "Cloud Manager" to use your domain name and your generated SSL?

Thank you.

[Markus Thielsch]

Hi EM,

As user of the MongoDB Cloud Manager you can always contact MongoDB using our Cloud Support website.

Unfortunately there is no setting in Cloud Manager which let’s you choose the hostnames. The only way of using your own hostnames is to provision the servers manually and then import them into Cloud Manager. Please have a look at how to Add Existing MongoDB Processes to Cloud Manager.

Alternatively you are able to create the SSL certificates and add DNS aliases to your SSL configuration and certificate files after you created them on *.example.com. You might want to have a look at this CAcert Wiki or apetec.com article in regards to this.

As for the question if you should use elastic IP or not I can’t make any recommendation as this depends entirely on your use case and is maybe best asked in the AWS forum.

Regards,
Markus

[EM]

Hi,

Thank you very much for your response. I will take a look to your links and to try to use my SSL certificates on my MongoDB deployment.

Just in case someone might be interested, I could easily allocate Elastic IPs to each instance of my MongoDB deployment. The changes were automatically reflected into the MongoDB Cloud Manager. This way, the IPs stay the same, even if the the instance need a reboot.

Best regards.