cs_nodeport.md

copyright	lastupdated
years 2014, 2018	2018-03-19

{:new_window: target="_blank"} {:shortdesc: .shortdesc} {:screen: .screen} {:pre: .pre} {:table: .aria-labeledby="caption"} {:codeblock: .codeblock} {:tip: .tip} {:download: .download}

Setting up NodePort services

{: #nodeport}

Make your containerized app available to internet access by using the public IP address of any worker node in a Kubernetes cluster and exposing a node port. Use this option for testing {{site.data.keyword.containerlong}} and short-term public access. {:shortdesc}

Planning external networking with NodePort services

{: #planning}

Expose a public port on your worker node and use the public IP address of the worker node to access your service in the cluster publicly from the internet. {:shortdesc}

When you expose your app by creating a Kubernetes service of type NodePort, a NodePort in the range of 30000 - 32767 and an internal cluster IP address is assigned to the service. The NodePort service serves as the external entry point for incoming requests for your app. The assigned NodePort is publicly exposed in the kubeproxy settings of each worker node in the cluster. Every worker node starts listening on the assigned NodePort for incoming requests for the service. To access the service from the internet, you can use the public IP address of any worker node that was assigned during cluster creation and the NodePort in the format <ip_address>:<nodeport>. In addition to the public IP address, a NodePort service is available over the private IP address of a worker node.

The following diagram shows how communication is directed from the internet to an app when a NodePort service is configured:

1. A request is sent to your app by using the public IP address of your worker node and the NodePort on the worker node.

2. The request is automatically forwarded to the NodePort service's internal cluster IP address and port. The internal cluster IP address is accessible inside the cluster only.

3. kube-proxy routes the request to the Kubernetes NodePort service for the app.

4. The request is forwarded to the private IP address of the pod where the app is deployed. If multiple app instances are deployed in the cluster, the NodePort service routes the requests between the app pods.

Note: The public IP address of the worker node is not permanent. When a worker node is removed or re-created, a new public IP address is assigned to the worker node. You can use the NodePort service for testing the public access for your app or when public access is needed for a short amount of time only. When you require a stable public IP address and more availability for your service, expose your app by using a LoadBalancer service or Ingress.

Configuring public access to an app by using the NodePort service

{: #config}

You can expose your app as a Kubernetes NodePort service for free or standard clusters. {:shortdesc}

If you do not already have an app ready, you can use a Kubernetes example app called Guestbook .

1. In the configuration file for your app, define a service section. Note: For the Guestbook example, a front-end service section already exists in the configuration file. To make the Guestbook app available externally, add the NodePort type and a NodePort in the range 30000 - 32767 to the front-end service section.

   Example:

   apiVersion: v1
   kind: Service
   metadata:
     name: <my-nodeport-service>
     labels:
       run: <my-demo>
   spec:
     selector:
       run: <my-demo>
     type: NodePort
     ports:
      - port: <8081>
        # nodePort: <31514>
   
   

   {: codeblock}

   Understanding this YAML file's components

   Understanding the NodePort service section components
   name	Replace <my-nodeport-service> with a name for your NodePort service.
   run	Replace <my-demo> with the name of your deployment.
   port	Replace <8081> with the port that your service listens on.
   nodePort	Optional: Replace <31514> with a NodePort in the 30000 - 32767 range. Do not specify a NodePort that is already in use by another service. If no NodePort is assigned, a random one is assigned for you. If you want to specify a NodePort and want to see which NodePorts are already in use, you can run the following command: kubectl get svc Any NodePorts in use appear under the **Ports** field.

2. Save the updated configuration file.

3. Repeat these steps to create a NodePort service for each app that you want to expose to the internet.

What's next:

When the app is deployed, you can use the public IP address of any worker node and the NodePort to form the public URL to access the app in a browser.

1. Get the public IP address for a worker node in the cluster.

   bx cs workers <cluster_name>
   

   {: pre}

   Output:

   ID                                                Public IP   Private IP    Size     State    Status
   prod-dal10-pa215dcf5bbc0844a990fa6b0fcdbff286-w1  192.0.2.23  10.100.10.10  u2c.2x4  normal   Ready
   prod-dal10-pa215dcf5bbc0844a990fa6b0fcdbff286-w2  192.0.2.27  10.100.10.15  u2c.2x4  normal   Ready
   

   {: screen}

2. If a random NodePort was assigned, find out which one was assigned.

   kubectl describe service <service_name>
   

   {: pre}

   Output:

   Name:                   <service_name>
   Namespace:              default
   Labels:                 run=<deployment_name>
   Selector:               run=<deployment_name>
   Type:                   NodePort
   IP:                     10.10.10.8
   Port:                   <unset> 8080/TCP
   NodePort:               <unset> 30872/TCP
   Endpoints:              172.30.171.87:8080
   Session Affinity:       None
   No events.
   

   {: screen}

   In this example, the NodePort is 30872.

3. Form the URL with one of the worker node public IP addresses and the NodePort. Example: http://192.0.2.23:30872