Migrating the Federation Proxy

This step is a part of the service nodes migration to Azure.

The Federation Proxy provides access to the APS Controller from external networks.

The Federation Proxy migration to Azure is performed within a single maintenance (migration) window.

Migration Procedure

To migrate the Federation Proxy node to Azure:

• Step 1. Prepare a virtual machine with a new IP address for the Federation Proxy node in Azure.
• Step 2. Configure the target Federation Proxy with a new IP address.
• Step 3. Update the APS Connection proxy settings (PCP).
• Step 4. Remove the source Federation Proxy.

Step 1. Prepare a virtual machine with a new IP address for the Federation Proxy node in Azure

1. Create a virtual machine in Azure with a public IP address.

2. Check the inbound access to the virtual machine from the necessary external networks.

   Note: The list of allowed external networks depends on the firewall configuration.

3. Check the outbound access from the virtual machine to CloudBlue Commerce Management Node.

Step 2. Configure the target Federation Proxy with a new IP address

1. Configure a new Federation Proxy server according to the Inbound proxy configuration instructions.

2. Change the firewall configuration: Allow access to <proxy external ip>:6308 for all APS Connect IPs:

   Note: For the relevant list of APS Connect IP addresses, please refer to the Connect documentation.

   • 185.152.193.226
   • 35.195.35.144
   • 35.198.119.57
   • 130.211.99.198
   • 35.198.148.180
   • 35.198.105.41
   • 35.190.32.249
   • 130.211.19.106
   • 35.195.142.140
   • 35.187.124.49
   • 104.199.107.87
   • 35.195.105.130
3. Allow access to <Operations MN IP>:6308 for the Federation Proxy node.

4. For the DNS A-record, change the old to the new IP address (the public IP address of the virtual machine):

   1. In the Provider Control Panel, go to Operations > Services > Domains. Click the necessary domain.
   2. Go to DNS > DNS Records > Type A > Host. Click Edit. Set the IP address value.

5. To make sure that the changes have been fully applied, check the A record IP address:

   host -a <FEDERATION_PROXY_NAME>

   where <FEDERATION_PROXY_NAME> is the Federation Proxy hostname.

   For example:

   host -a federation.example.com

Step 3. Update the APS Connection Inbound Proxy Settings

Update the inbound proxy configuration in CloudBlue Commerce:

1. Go to System > Settings > APS Connection > Proxy settings > the Inbound Proxy section.
2. Update the URL field with the new Federation Proxy URL.

Step 4. Remove the source Federation Proxy

Remove old Federation Proxy node. For instructions, please refer to Removing a Hardware Node.