Which hostname:port of Bluemix app should be set in acl of Secure Gateway Client

757 views Asked by At

I would like to make only my Bluemix app to access my Secure Gateway client. I used "Access control list" such as the following command.

acl allow sampleapp.mybluemix.net

  • sampleapp.mybluemix.net is my Bluemix app's FQDN

But I got error HTTP503 when I executed trx. The Secure Gateway Client's log was "Connection #X to destination X.X.X.X:XXX refused due to Access Control List"

enter image description here

Which hostname:port of Bluemix app should be set in acl of Secure Gateway Client ?

Secure Gateway client interactive command-line interface https://www.ng.bluemix.net/docs/services/SecureGateway/sg_022.html#sg_009

1

There are 1 answers

6
doktoroblivion On BEST ANSWER

The hostname to use on the access control list (ACL) allow should be the actual hostname of where the on-premises application is running, not what is trying to access it. Remember the ACL if allow is mutually exclusive, so it will prevent all other connections that are not part of an allow ACL.