CODEWITHSUNDEEP
mesosmesosphere
Nadi Hassan Hassan
Nadi Hassan Hassan

Reputation: 142

Mesosphere not allowing External Traffic

I spun up a Mesosphere cluster on Digital Ocean (development) and it's not allowing me to allow external (non vpn) connections to containers or apps. How can this be solved ?

Upvotes: 0

Views: 248

Answers (1)

grampelberg
grampelberg

Reputation: 266

To ensure that the world doesn't have access to your cluster normally, there have been iptables rules installed. By default, these allow full access inside the cluster and nothing externally.

If you're interested in running real applications, I'd recommend the following:

  • Put HAProxy on a single node.
  • Setup the haproxy-marathon-bridge script.
  • On the same box that you installed HAProxy on, setup iptables to allow access to the port that HAProxy is listening on.

By doing this, you'll have a single place to refer to when giving access to applications running on your Mesos cluster. No matter where the app or container is scheduled (with marathon), you'll always be able to reach it via. haproxy.

Upvotes: 4

Related Questions