Switch branches/tags
Nothing to show
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
174 lines (122 sloc) 6.68 KB
title weight


You can interact with your provisioned services interactively by using the af tunnel command. This uses an app called "Caldecott", which is a TCP proxy over HTTPS. Caldecott creates a tunnel that connects a port on your local computer to the service in AppFog. The af tunnel command uploads the Caldecott app to your AppFog instance, sets up the tunneling, and offers to start a standard client on your computer to work with the service. This can be useful for managing your services as well as for debugging.


  • Caldecott requires Ruby 1.9.2.
  • Caldecott starts a client program for the service you want to access, for example mysql for MySQL or psql for PostgreSQL. The client must be installed on your computer and be on the execution PATH so that Caldecott scripts can start it. If you want to use a different client, Caldecott will display the connection information and credentials you will need to connect to the service. The following table shows the client programs Caldecott can start for each service.
Service Client
MongoDB mongo
MySQL mysql
PostgreSQL psql


Get a list of your services by using the af services command:

$ af services

Which should return something like this:

============== System Services ==============

| Service    | Version | Description                 |
| mongodb    | 1.8     | MongoDB NoSQL store         |
| mysql      | 5.1     | MySQL database service      |
| postgresql | 9.1     | PostgreSQL database service |

=========== Provisioned Services ============

| Name                  | Service    |
| exampleapp1-mysql     | mysql      |
| exampleapp2-mysql     | mysql      |
| exampleappmongodb     | mongodb    |
| example-postgres      | postgresql |

Create a tunnel to the service with af tunnel <service>. For example:

$ af tunnel exampleapp1-mysql

The first time you create a tunnel, af uploads Caldecott to your Cloud:

Uploading Application:
Checking for available resources: OK
Processing resources: OK
Packing application: OK
Uploading (1K): OK
Push Status: OK
Binding Service [exampleapp1-mysql]: OK
Staging Application: OK
Starting Application: OK

Then Caldecott creates the tunnel and prompts you to start a client. Here's an example session with mysql.

Starting tunnel to exampleapp1-mysql on port 10000.
1: none
2: mysql
3: mysqldump
Which client would you like to start?: 2
Launching 'mysql --protocol=TCP --host=localhost --port=10000
--user=um4rwWyhwa07B --password=pBiBlqjINB6cmdd368741dbc1945cfb62315565efcf1b5'

Welcome to the MySQL monitor.  Commands end with ; or \g.
Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

When you exit the client, af disconnects the tunnel.

Using Third-party Tools {#3rd-party-tools}

For the last step, if you choose the 1: none or if Caldecott doesn't have a default client for the service, you can simply leave the terminal window open. You can then start your preferred client in another window by using the provided "Service connection info".

Service connection info:
  username : uz2Nrj2p20TXA
  password : p1tmyq30ZhjgQ
  name     : ddc26c09b7a7d4a1b88dacf445a7c9f87
  infra    : aws

Starting tunnel to exampleapp1-mysql on port 10000.
1: none
2: mysql
3: mysqldump
Which client would you like to start?: 1
Open another shell to run command-line clients or
use a UI tool to connect using the displayed information.
Press Ctrl-C to exit...

Leaving that terminal session open, simply start your client. Here's an example with MySQL Workbench:

Launch Workbench. On the left, you’ll see "Open Connection to Start Querying". Below that, click on "New Connection" to get started. This will bring up a new menu where we’ll input the necessary information.

For the "Connection Name", you can use whatever you want.

For "Hostname", you need to use your "localhost", and for the "port number", use what was given to you in the command line (where it says Starting tunnel to on port ). Port 10000 is the default.

The username and password are in the output of the af tunnel command under "Service connection info".

The "Default Schema" can be whatever you want, just like the "Connection Name".

Click on "OK", and it will take you back to the main screen, where you can click on your newly formed connection under the "Open Connection to Start Querying" header. Double-click on the connection you just made and that's it!

Once you're done, hit Ctrl-C to exit af and close the tunnel.

More about the Tunnel Command

You can simply enter the af tunnel command and respond to the prompts to create a tunnel. The command allows you to select from a list of existing provisioned services, so you don't need to know the service's name ahead of time.

The full syntax of the af tunnel command is:

af tunnel [<servicename>] [--port <portnumber>] [<clientcmd>]

The <servicename> argument is the name of the service, as shown by the af services command. If you exclude <servicename>, af provides a list of existing services to choose from.

The <portnumber> parameter is the port to use on the local machine. By default, af chooses an available port in the 10000 range.

The <clientcmd> argument is the name of the client program to start. Only the client names shown in the table in the Prerequisites section are supported for this argument.


For more information, check out this blog post and this doc from Cloud Foundry. You can also check out Caldecott's GitHub repository.