Creating a RabbitMQ Service Instance with Service-Gateway Access

This topic tells you how to create a VMware Tanzu RabbitMQ for Tanzu Application Service service instance with service-gateway access.

Service-gateway access enables a Tanzu RabbitMQ for Tanzu Application Service on-demand service instance to connect to external components that are not on the same foundation as the service instance.

Create a Service Instance with Service-Gateway Access

This section assumes that you meet the prerequisites for using on-demand VMware Tanzu RabbitMQ for Tanzu Application Service. For more information, see Prerequisites.

If operators have enabled a service-gateway plan, you can create a service instance that can connect to components outside the your foundation. Contact your operator if you are unsure which plans have been enabled for service-gateway access. For information about the architecture and use cases, see Service-Gateway Access.

To create a service instance that enables service-gateway access:

Create a service instance with the service-gateway plan by running:
```
cf create-service p.rabbitmq SERVICE-GATEWAY-PLAN SERVICE-INSTANCE-NAME -c '{"tls": true}'
```
Caution VMware recommends that you configure service-gateway access with TLS to prevent man-in-the-middle attacks. For instructions on using TLS on your platform, see Use Transport Layer Security.
Obtain credentials by creating a service key:
```
cf create-service-key SERVICE-INSTANCE-NAME SERVICE-KEY-NAME
```
The uri section of the service key contains the address to the TCP router and a port from the port range. You can use this URI to connect to the service instance from outside the foundation.

Note If the operator deactivates and then re-activates service-gateway access on a plan, you must create new service keys to obtain a new set of credentials for service-gateway access.