private link - common dns suffix
when creating a private link, the resulted dns for the cluster is in the form of "cluster-pl-.{somerandomstring}.mongodb.net"
the only difference from the public endpoint is the 'pl' addition in the first section.
in order to configure the vpn wildcards and rules,
it can be extremely helpful to have this separation more general, for example
cluster.{randomstring}.pl.mongodb.net -- private links
cluster.{randomstring}.mongodb.net -- public
that way we can use the wild card *.pl.mongodb.net to differentiate and route the traffic accordingly
Dor
shared this idea
-
Alonso
commented
In addition to that, the generated DSN record resolves directly to our internal ip address associated with the private link. This causes security concerns. If we have an option for us to create the records ourselves internally would help mitigate it.