Register a CDH cluster reachable through private IP address

You can register CDH clusters that can be reached only through private IP address using a reverseSSH tunnel.

To ensure optimum security, clusters within the customer environment are not accessible for communication. They have private IP addresses and cannot be accessed outside the firewall. However, to add your cluster to the CDP, a communication line needs to be established.

A reverseSSH tunnel solves the problem by establishing a tunnel from the cluster to CDP. You must download and install AutoSSH and the connectivity install scripts to establish a secure two-way communication channel. The AutoSSH ensures that the connectivity is stable. The connectivity scripts and their installation ensure safe connectivity and communication.

The process to register a CDH cluster using a reverseSSH tunnel is as follows:

  1. On the CDP Management Console, you enter the private IP address of your cluster and provide the cluster details.
  2. You download the AutoSSH rpm from the specified location and the connectivity installation scripts from CDP on to the cluster.
  3. You install AutoSSH on the cluster.
  4. You register the cluster for performing further operations.

Perform the following steps to add a CDH cluster that is not reachable via public IP address.

  1. Log in to CDP Management Console.
  2. Click Classic Clusters in the left navigation panel.

    The Classic Clusters page appears.

  3. Click Add Cluster.

    Classic Cluster displays the Cluster Details dialog box.

  4. Click CDH.
  5. If your cluster is not reachable by a public network, click My cluster is accessible only in my private network.
  6. Provide the connectivity information for your new cluster, then click CONNECT.

    After Classic Cluster successfully connects to your new cluster, it will highlight Step 2.

  7. Start the download and installation process for the SSH connectivity files by clicking the Files button in the Step 2 pane.
  8. Follow the instructions in the Setup Connectivity Client dialog box. You need to download the ccm-autosssh-client rmp file and the ssh_tunnel_setup_files zip file onto Cloudera Manager host in your new cluster and then:
    1. Install the AutoSSH rpm (the ccm-autosssh-client file)
    2. Unzip the ssh_tunnel_setup_files file. Inside this zip file there is a script install.sh
    3. Run install.sh by using ./install.sh command

    Five minutes after you download the ssh files, Classic Cluster starts checking the connectivity with the cluster. When the connectivity is successful, proceed to Step 3 in the UI.

    If the connection attempts fail or if there is an error in the connectivity, Classic Cluster displays troubleshooting information in the Step 2 pane. Follow the troubleshooing information to fix the connectivity error, then click Test connection.

  9. Click Register in the Step 3 pane.
  10. Provide the username and password of the Cloudera Manager user to access the cluster.
  11. Finishing registering the cluster by providing the following information.
    • Cluster Location
    • Data Center
    • Tags (optional)
    • Description (optional)
  12. Click Submit.