Service-gateway access enables a VMware Tanzu for Valkey on Cloud Foundry on-demand service instance to connect to external components that are not on the same foundation as the service instance. These components might be on another foundation or hosted outside of the foundation.

For related procedures, see:

• Enabling Service-Gateway access
• Create a Service Instance with Service-Gateway access

There are multiple use cases for service-gateway access.

For example:

• Accessing Valkey from apps deployed to Tanzu Platform for Cloud Foundry (Tanzu Platform for CF) in a different foundation.
• Using Valkey as a service for apps that are not deployed to Tanzu Platform for CF.

Architecture

Service Gateway access to Tanzu for Valkey on Cloud Foundry instances leverages the TCP Router in Tanzu Platform for CF.

Any Valkey requests that an app makes are forwarded through DNS to a load balancer that can route traffic from outside to inside the foundation. This load balancer (the TCP Router) opens a range of ports that are reserved for any Tanzu Platform for CF application traffic. When an app developer creates a service instance on a plan with service-gateway access enabled, a port from such a range is provisioned for that service instance. The load balancer then forwards the requests for this Tanzu for Valkey on Cloud Foundry service instance to the TCP router.