How to open external FW for a DO Kubernetes cluster (IP ranges)?

Hi there,

DigitalOcean’s Kubernetes service uses a load balancer to expose your applications to the internet. The Load Balancer has an external IP address that you can use to access your application. If your application needs to access an external service that is behind a firewall, you can use this IP address to configure the firewall rules.

However, it’s important to know that the outbound connections from your Kubernetes pods don’t originate from the Load Balancer IP. They use the node’s IP where the pod is currently running. And because Kubernetes can schedule pods to different nodes, the source IP of outbound connections can change.

If you need to whitelist a specific IP range in an external firewall, DigitalOcean currently doesn’t provide dedicated IP ranges for DOKS or other services. A common workaround for this is to set up a server (like a Droplet or a dedicated Kubernetes node) with a static public IP, and route your traffic to the external service through that server.

Here is a discussion about this for more information:

https://github.com/digitalocean/DOKS/issues/9

If you want to give it a try then you can follow the URL: https://github.com/digitalocean/k8s-staticroute-operator/

Best,

Bobby