Skip to content

Commit 8037c2e

Browse files
committed
docs: refine private networking overview per review feedback
1 parent 2bd750a commit 8037c2e

1 file changed

Lines changed: 5 additions & 13 deletions

File tree

docs/private-networking/overview.mdx

Lines changed: 5 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ description: "Connect your tasks to private resources in your AWS account using
77
Private networking lets your Trigger.dev tasks reach databases, caches, and internal APIs that live inside your own AWS VPC, without exposing them to the public internet. Connectivity is established over [AWS PrivateLink](https://docs.aws.amazon.com/vpc/latest/privatelink/what-is-privatelink.html), so traffic stays on the AWS backbone.
88

99
<Info>
10-
Private networking is an enterprise feature. If you'd like access, [get in touch](/community).
10+
Private networking is a Pro and Enterprise feature. If you'd like access, [get in touch](/community).
1111
</Info>
1212

1313
## What is AWS PrivateLink
@@ -42,18 +42,16 @@ When you add a private connection in the dashboard, the following happens:
4242
You create an internal NLB in front of your resource and a VPC Endpoint Service that points to it. You add Trigger.dev's AWS account as an allowed principal so we're permitted to connect.
4343
</Step>
4444
<Step title="We provision a VPC Endpoint">
45-
Once you submit the endpoint service name in the Trigger.dev dashboard, we provision a VPC Endpoint in our isolated, customer-PrivateLink AWS account in the region you chose. The endpoint creates ENIs with private IPs that we wire up to reach your service.
45+
Once you submit the endpoint service name in the Trigger.dev dashboard, we provision a VPC Endpoint in our AWS account in the region you chose. The endpoint creates ENIs with private IPs that we wire up to reach your service.
4646
</Step>
4747
<Step title="Your tasks can reach the endpoint">
48-
Once the connection is **Active**, the dashboard shows the assigned IPs (one per Availability Zone) and a copyable DNS endpoint name. Pods running your tasks are network-authorized to connect to those addresses.
48+
Once the connection is **Active**, the dashboard shows the assigned IPs and a copyable DNS endpoint name. Pods running your tasks are network-authorized to connect to those addresses.
4949
</Step>
5050
</Steps>
5151

5252
### Connecting from your task code
5353

54-
When the connection becomes **Active**, the dashboard shows the assigned endpoint IPs and a copyable DNS endpoint name that resolves to those IPs from inside our worker network.
55-
56-
Plug whichever you prefer into the connection-string env var your task already reads (for example, `DATABASE_URL` set in the **Environment Variables** page):
54+
When the connection becomes **Active**, the dashboard shows the assigned endpoint IP. Plug it into the connection-string env var your task already reads (for example, `DATABASE_URL` set in the **Environment Variables** page):
5755

5856
```typescript
5957
import { task } from "@trigger.dev/sdk";
@@ -63,7 +61,7 @@ export const queryDatabase = task({
6361
id: "query-database",
6462
run: async () => {
6563
// DATABASE_URL is set in the Trigger.dev dashboard to the connection's
66-
// assigned IP or DNS endpoint name shown in Private Connections.
64+
// assigned IP shown in Private Connections.
6765
const client = new Client({
6866
connectionString: process.env.DATABASE_URL,
6967
});
@@ -77,12 +75,6 @@ export const queryDatabase = task({
7775
});
7876
```
7977

80-
<Tip>
81-
Connections expose multiple IPs (one per Availability Zone). For higher availability, use a
82-
driver that supports failover or use the DNS endpoint name, which AWS resolves to whichever IPs
83-
are currently healthy.
84-
</Tip>
85-
8678
## Isolation between organizations
8779

8880
Private networking is set up so that each organization's connections are completely isolated from every other organization. Three layers enforce that:

0 commit comments

Comments
 (0)