1 Cloud Connector and the Hybrid Cloud Landscape

6

1.1 What Is Hybrid Cloud?

6

1.2 The Connectivity Challenge of Hybrid Cloud

7

1.3 Hybrid Cloud Applications on SAP Cloud Platform

8

1.4 Cloud Connector’s Approach to Connectivity

8

2 Installing and Managing Cloud Connector

11

2.1 Hardware Requirements

11

2.2 Java Requirements

11

2.3 Installation Options: Portable versus Installer

12

The Portable Version

12

The Installer Version

13

Which Version Should You Choose?

13

2.4 Hands-on: Installing Cloud Connector

14

Download the Latest Version of Cloud Connector

14

Install the Portable Version

15

Install the Installer Version on Microsoft Windows

15

Install the Installer Version on Linux

20

Log In and Perform Initial Setup

20

2.5 Starting and Stopping Cloud Connector

22

Portable Version

22

Installer Version on Microsoft Windows

22

Installer Version on Linux

23

Restarting from the UI

24

2.6 Uninstalling Cloud Connector

24

Portable Version

24

Installer Version on Microsoft Windows

24

Installer Version on Linux

25

2.7 Upgrading an Existing Installation

26

Portable Version

26

Installer Version on Microsoft Windows

27

Installer Version on Linux

27

3 Connecting to SAP Cloud Platform

28

3.1 Network Requirements

28

3.2 Hands-on: Connecting to an SAP Cloud Platform Trial Subaccount

29

3.3 Connecting Through an HTTPS Proxy

32

3.4 Connecting to Multiple SAP Cloud Platform Subaccounts

33

3.5 A Closer Look at the Initiating User

34

3.6 Connecting Multiple Cloud Connector Instances to the Same Subaccount

35

3.7 Disconnecting Cloud Connector

38

4 Configuring Cloud to On-Premise Access

39

4.1 Cloud to On-Premise Overview

39

4.2 Supported Protocols

40

HTTP

40

RFC

40

LDAP

40

TCP

41

4.3 Adding a System Mapping

41

Choose a Backend Type

42

Choose a Protocol

43

Choose a Load Balancing Option

44

Enter the Connection Details

44

Enter the Virtual Connection Details

46

Choose a Principal Type

48

Enter the SNC Partner Name String

48

Provide a Description

49

Review the Summary and Conclude the Wizard

49

4.4 Adding an On-Premise Resource

50

Adding an HTTP Resource

51

Adding an RFC Resource

52

4.5 Mapping Cookie Domains

54

4.6 Additional RFC Protocol Security

56

4.7 Configuring Cloud Connector for SNC

57

4.8 Hands-on: Calling an On-Premise REST Service from the Cloud

58

Install Apache Tomcat and Deploy the REST Service

58

Configure Cloud Connector

60

Create an SAP Cloud Platform Destination

61

Import and Run the HTML5 Application

62

4.9 Accessing a TCP Resource from SAP Cloud Platform

64

5 Configuring On-Premise to Cloud Access

66

5.1 On-Premise to Cloud Overview

66

5.2 Database Service Channels

67

Creating a Database Service Channel

68

Connecting Your Database Tool

69

5.3 Virtual Machine Service Channels

70

5.4 S/4HANA Cloud Service Channels

72

6 Cloud Connector Operations

73

6.1 Monitoring Cloud Connector Traffic

74

Performance

74

Most Recent Requests

75

Top Time Consumers

76

Backend Connections

77

6.2 Logs and Traces

78

6.3 Backing Up and Restoring Your Configuration

81

6.4 Cloud Connector APIs

82

Health Check

83

List of Subaccounts

84

List of Open Connections

84

Performance Monitor Data

85

6.5 Alerting

86

Configuring Alert Triggers

87

Setting Up Email Alerts

88

6.6 Configuring High Availability

90

Enabling High Availability

92

Installing and Connecting the Shadow Instance

93

6.7 Minimizing Downtime during Upgrades

97

6.8 Changing the Cloud Connector UI Port Number

98

7 Security

99

7.1 The Security Status Overview

100

7.2 Where to Run Cloud Connector

102

Running Cloud Connector in the DMZ

103

Running Cloud Connector in the Internal Network

105

7.3 Signing the UI Certificate

107

Create a Signing Request

107

Copy the System Certificate

109

Excluding Cipher Suites

110

7.4 Principal Propagation

111

7.5 The Two Authentication Modes of Cloud Connector’s UI

113

Maintaining the Administrator User in Password Authentication Mode

113

Setting Up LDAP Authentication

114

LDAP Configuration Attributes

116

Switching from LDAP Authentication to Password Authentication

118

7.6 Application Whitelisting

119

7.7 The Cloud Connector Audit Log

122

Audit Log Levels

123

Audit Log File Integrity and Security

124

The Audit Log and Named Users

126

7.8 The Trust Store

126

Acknowledgments

128

Usage, Service, and Legal Notes

132

Notes on Usage

132

Service Pages

132

Praise and Criticism

132

Supplements

133

Technical Issues

133

About Us and Our Program

133

Legal Notes

133

Copyright Note

133

Your Rights as a User

134

Digital Watermark

134

Limitation of Liability

134