If an administrator often needs to manage multiple ECS instances in an Alibaba Cloud VPC through the Internet Which of the following solutions can meet this need at low costs and without affecting system security.
A.
None of these answers are correct.
B.
Choose an ECS instance from VPC and make it as the bastion host And then, apply an EIP and bind it to this ECS instance. After that the administrator can manage other ECS instances through this bastion host.
C.
Modify the VPC Security Group policy, to allow access from the Internet.
D.
Bind an EIP to each of the ECS instances, and Jog on to each of these ECS instances to manage them.
A bastion host is a special-purpose computer on a network specifically designed and configured to withstand attacks. The computer generally hosts a single application, for example a proxy server, and all other services are removed or limited to reduce the threat to the computer. It is hardened in this manner primarily due to its location and purpose, which is either on the outside of a firewall or in a demilitarized zone (DMZ) and usually involves access from untrusted networks or computers. In the context of Alibaba Cloud, a bastion host can be used to securely access and manage multiple ECS instances in a VPC through the Internet. By applying an EIP and binding it to the bastion host, the administrator can use SSH or RDP protocols to log on to the bastion host from the Internet, and then use the same protocols to access other ECS instances in the VPC through the private network. This way, the administrator can avoid exposing all the ECS instances to the Internet, which would increase the risk of attacks and incur higher costs. The bastion host can also be configured with security policies and monitoring tools to enhance the protection of the ECS instances in the VPC. References: Bastion Host, Access an ECS Instance by Using a Bastion Host
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit