configuring-private-connectivity

Configure private endpoints and VPC peering for CockroachDB Cloud clusters.

3|3|Updated Mar 11, 2026
One-click install
npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-private-connectivity
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: configuring-private-connectivity
Source: https://github.com/cockroachdb/claude-plugin/tree/main/skills/security-and-governance/configuring-private-connectivity
Command: npx skills add https://github.com/cockroachdb/claude-plugin --skill configuring-private-connectivity

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Configures private network connectivity for CockroachDB Cloud clusters to eliminate public internet exposure. This skill covers provisioning ingress private endpoints, egress private endpoints for external services, and VPC peering, along with DNS configuration and Terraform integration.

Core Features & Use Cases

  • Ingress private endpoints: AWS PrivateLink, GCP Private Service Connect, and Azure Private Link to secure cluster access.
  • Egress private endpoints: allow CockroachDB Cloud to connect to external services over private networks (CDC, private SaaS, etc.)
  • VPC peering: establish direct connectivity between CockroachDB Cloud VPCs and application VPCs.
  • DNS configuration and Terraform integration: enable private DNS resolution and reproducible infrastructure changes.
  • Troubleshooting guidance: DNS, connectivity, and status checks for private connectivity components.

Quick Start

Provide cluster ID and desired connectivity type (ingress, egress, or peering) to begin configuring private connectivity.

Frequently Asked Questions about configuring-private-connectivity

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure private connectivity for a CockroachDB Cloud cluster?

CockroachDB Cloud supports ingress private connectivity through AWS PrivateLink, GCP Private Service Connect, and Azure Private Link, allowing you to isolate cluster traffic and eliminate public internet exposure securely.

Can I set up VPC peering between my application VPC and CockroachDB Cloud?

Yes, VPC peering establishes direct connectivity between CockroachDB Cloud VPCs and application VPCs across AWS, GCP, and Azure, requiring cloud provider permissions and DNS management to ensure private traffic routing.

How do egress private endpoints work for CockroachDB Cloud external connections?

Egress private endpoints allow CockroachDB Cloud to connect to external services like CDC or private SaaS over private networks. You provision them using Terraform to prevent public internet exposure during data transmission.

Do I need Terraform to manage private endpoint DNS configuration for CockroachDB?

Terraform integration is required to manage private DNS resolution and ensure reproducible infrastructure changes for CockroachDB private endpoints. You also need cloud provider permissions and the cluster ID to execute the connectivity setup.

What should I do if my CockroachDB private connectivity or DNS resolution is failing?

For failing private connectivity or DNS resolution, use the provided troubleshooting guidance to check DNS configuration, connectivity status, and private endpoint components. Verify cloud provider permissions and Terraform execution logs.