Skip to content

Commit cb9b300

Browse files
committed
Priv Conn best practices suggestions
1 parent dc6b453 commit cb9b300

1 file changed

Lines changed: 4 additions & 8 deletions

File tree

content/en/docs/control-center/security/private-connectivity/best-practices.md

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -14,13 +14,9 @@ Private Connectivity is currently in Public Beta, and will be out of Public Beta
1414

1515
This page provides best practices for configuring and using Private Connectivity networks, agents, and resources. Following these guidelines helps ensure secure, efficient, and maintainable connections between your Mendix apps and internal infrastructure.
1616

17-
{{% alert color="info" %}}
18-
Mendix uses Tailscale subnet routers to access routes in your network. In a Mendix context, these are called agents.
19-
{{% /alert %}}
20-
2117
## Authentication Key Security
2218

23-
Creating an agent involves creating an authentication key. An agent registered with that authentication key can join the agent's network. If you have a production network, only use the generated authentication key for agents placed in your production network. Apply the same principle for development networks.
19+
Installing an agent involves creating an authentication key. An agent registered with that authentication key can join the agent's network. If you have a production network, only use the generated authentication key for agents placed in your production network. Apply the same principle for development networks.
2420

2521
## When to Create Networks
2622

@@ -93,12 +89,12 @@ For example, Azure Container Apps do not have privileged container access, so yo
9389

9490
## Advertised Routes
9591

96-
Mendix uses Tailscale subnet routers to advertise routes to your network. This gives you full control over where the agent forwards traffic within your network.
92+
You need to advertise which IP addresses can be accessed by Mendix Cloud. This gives you full control over where the agent forwards traffic within your network.
9793

9894
### Routes to Advertise
9995

10096
The routes you advertise depend on what your Mendix Cloud app needs to access and what you want to share:
10197

10298
* Single resource – If your app only needs to reach one specific resource, advertise it as a `/32` route (for example, `192.168.1.10/32`).
103-
* App subnet – If you host all apps in one specific subnet, use the subnet router (for example, `192.168.1.0/24`).
104-
* Entire network – If you want to share the entire network to avoid repeatedly opening new routes, use the entire VPC or VNet subnet router (for example, `192.168.0.0/16`).
99+
* App subnet – If you host all apps in one specific subnet, advertise the entire subnet (for example, `192.168.1.0/24`).
100+
* Entire network – If you want to share the entire network to avoid repeatedly opening new routes, use the entire VPC or VNet subnet (for example, `192.168.0.0/16`).

0 commit comments

Comments
 (0)