Content Comparison

AMI

Choose Ubuntu 20 (ubuntu-focal-20.04) SSD Volume Type

Instance Type

c5.2xlarge or bigger in CPU & memory

Shutdown behaviour (Stop)

Enable Termination Protection

Storage

Root Volume: 30GB (gp3)
EBS: 100GB (gp3) ( Disable Delete on termination)

Termination protection

Enable

Security Group Rules

Please note if Controlplane and EaaS Server are in the same VPC, then we can use just Private IP and configure “All TCP” from security-group of the controlplane

If this instance is in a different region/VPC then we have to enable Public/External IP and open below traffic from anywhere

Inbound Rules with “Source as Roost Control plane SG”

1. SSH (port 22)

Inbound Rules with “Source as VPC Default SG”

1. SSH (port 22)

2. HTTPS (port 443)

3. TCP Port 5000 for Docker Host

4. TCP Port 5002 for Docker Insecure Registry

5. TCP Port 60001 for Jump Host RoostApi Server

6. TCP Port 60002 for Roost Cluster Launcher

7. TCP Port 60003 for EaaS API Server

8. TCP Port 60005 for Cypress Video Server

9. TCP Port 60006 for Web-console(gotty) default service - ubuntu user

10. TCP Port 62020-62120 for dynamic gotty ports - mapped to individual users

Tag

Name: Roost EaaS Server

Public IP

Disabled