Hi. Currently I am trying a scenario where I have DB2 hosted on a Bluemix VM and WebSphere Application Server running in a Bluemix container. I am trying to look at options we have in Bluemix to ensure the DB2 database hosted in the VM is securely accessible to the WebSphere Application Server that is running in the container.

I've tried Network Security Group service, where I've added a new security group shielding the DB2 VM. However, I am not sure which public subnet/gateway of the Bluemix containers (currently on 172.34.x.x/6) to use for the "Source IP Subnet". I want to ensure that only the containers in my Bluemix space can access the DB2 VM and the rest of the traffic is blocked.

Please advise. Thanks!