How to use Object Storage with Private Networks

The Public Gateway feature of the Private Network allows Instances in your Private Network to reach resources on the Internet without using a public IP address.

In this documentation, you will learn how to create an Instance without a public IP address, create a Private Network with a Public Gateway, and a route from your Instance to an Object Storage bucket.

How to create an Instance without a public IP

Follow the instructions for creating an Instance. We create an Instance without a flexible IP using the following specifications for our Instance:

• Availability Zone: nl-ams-1 (but you can select the AZ of your choice).
• OS Image: Ubuntu 20.04 Focal Fossa
• Instance type: DEV1-S
• Advanced options: Untick the flexible IP option

How to create a Private Network and attach the Instance

1. Follow the instructions for creating a Private Network. Make sure you create it in the region that encompasses the Availability Zone of the Instance you previously created.
2. Follow the instructions to attach your Instance to the Private Network.

How to create a Public Gateway and attach the Private Network

1. Follow the instructions for creating a Public Gateway:
   • Select the same Availability Zone as for your previously created Instance.
   • Leave the IP configuration empty to allocate a new IP to your Public Gateway.
   • You can choose a gateway type, name and tags according to your choice. After creating your Public Gateway, you are directed to a list of this and any other Public Gateways you have previously created.
2. Click on your new Public Gateway’s name. The gateway’s dashboard displays.
3. Click the Private Networks tab.
4. Click Attach to a new Private Network. A pop-up window displays.
5. Select Attach to an existing Private Network and pick a Private Network from the drop-down list. Set Dynamic NAT to active.
6. Click Attach to Private Network.

How to set the Object Storage Route

1. SSH into your Instance using the following command:

   ssh root@your_virtual_instance_ipCopy

   Note:

   As your Instance has no public IP address, you must connect to it using another Instance in your Private Network or assign a temporary public IP to it.

2. Configure the following route to the Object Storage platform:

   # set this to keep the network on the instance
   ip route add 10.0.0.0/8 via `ip route | grep default | awk '{print $3} '` dev ens2
   # dhcp on pn interface
   dhclient ens5
   # change default route
   ip route del default via `ip route | grep default | awk '{print $3} '` dev ens2
   ip route add default via 192.168.42.1 dev ens5 # use the gateway ip in the gateway's description
   curl https://s3.nl-ams.scw.cloudCopy

Conclusion

You have now configured an Instance with a Private Network to communicate with Scaleway’s Object Storage platform using the Public Gateway feature. The gateway ensures the exchange of data between your Private Network and the public Internet.