Rotating Outbound Connectors
Change the outbound connector that a mount target uses.
If a mount target already uses a functioning outbound connector, but you need to update the mount target to use a new outbound connector, we recommend using two outbound connectors when making the change. While it's not a requirement to use two outbound connectors, this strategy can prevent unnecessary outages.
When using two outbound connectors, the existing, functional outbound connector should be used as a backup in case the new outbound connector fails. Outbound Connector 1, the new outbound connector, is used unless the bind operation fails, in which case Outbound Connector 2, the previous outbound connector, is used.
At any time, including after changing the outbound connector that a mount target uses, you can use metrics or enable NFS Logs for the mount target and search for "connection established" to verify connection details.
- Open the navigation menu and click Storage. Under File Storage, click Mount Targets.
- In the List scope section, under Compartment, select a compartment.
- Click the name of the mount target that you want to update to use a different outbound connector.
- Click the NFS tab to view the existing NFS settings for the mount target.
- Next to LDAP, click Manage.
-
In the Manage LDAP window, update the outbound connectors as follows:
- Outbound Connector 1: Select the new outbound connector that the mount target will use to communicate with the LDAP server.
- Outbound Connector 2: Select the outbound connector that was previously used by this mount target to communicate with the LDAP server.
- Click Save.
Use the
fs mount-target update
command and--ldap-idmap
parameter to update the outbound connectors a mount target uses:oci fs mount-target update --mount-target-id <mount_target_OCID> --ldap-idmap <LDAP_details>
For a complete list of flags and variable options for CLI commands, see the Command Line Reference.
Run the UpdateMountTarget operation and
ldapIdmap
along withoutboundConnector1Id
andoutboundConnector2Id
to update the outbound connector that a mount target uses.For information about using the API and signing requests, see REST API documentation and Security Credentials. For information about SDKs, see SDKs and the CLI.