Skip to main content

Public IP address in an OpenSearch cluster

Public IP addresses are static IP addresses that can be attached to cluster nodes in a private network to configure access to them from the internet. Addresses are attached to all nodes in the group simultaneously, with a dedicated public IP address for each node. If you add a node to a group where all nodes already have IP addresses, the new node will also be assigned a public IP address.

To attach a public IP address, a cloud router with internet access is used. The public IP address is associated with the private IP address of the cluster node. Incoming traffic is processed by the cloud router: the router performs 1:1 NAT via the external IP address allocated when connecting the router to the internet. Incoming traffic can be filtered using a cloud firewall or a security group.

You can attach a public IP address:

If necessary, you can detach a public IP address for the entire node group.

Private subnet requirements for attaching a public IP address

  • the subnet must have a cloud router connected to the internet;
  • The IP address of the cloud router must be the default gateway in the cluster subnet.

If the router is already connected to the cluster subnet, but its IP address does not match the gateway, you will not be able to attach a public IP address. In this case, disconnect the subnet from the cloud router, then reconnect it and specify the subnet gateway address.

Prepare a private subnet for attaching a public IP address

  1. Create a cloud router with an internet connection.
  2. Connect the private subnet to the cloud router.

1. Create a cloud router with an internet connection

  1. In the control panel, in the top menu, click Products and select Cloud Servers.
  2. Go to Network → Cloud Routers.
  3. Click Create router.
  4. Select the location where the cloud router will be created.
  5. Select a router type.
  6. Enter the router name.
  7. Select the Connect router to internet checkbox — a public IP address will be allocated for the router.
  8. Click Create.

2. Connect a private subnet to the cloud router

  1. In the control panel, from the top menu, click Products and select Cloud Servers.
  2. Go to the Network section → Cloud Routers tab.
  3. Open the router card.
  4. Click Connect subnet.
  5. Select a private subnet.
  6. Optional: enter the router IP address. If you do not specify an IP address, it will be automatically selected from available subnet addresses. The cloud router IP address must match the default gateway of the private subnet. You can check the gateway in the control panel: from the top menu, click Products → Cloud Servers → Network → the Private Networks tab → network page → the Subnets tab → subnet card → the Automatic network configuration block → the Subnet gateway field.
  7. Click Connect.

Attach a public IP address

  1. In the Control panel, in the top menu, click Products and select Cloud Databases.

  2. Open the tab Active.

  3. Open the database cluster page → tab Settings.

  4. In the node group card, in the Public access line, click .

  5. If the cluster subnet meets the requirements, click Attach.

  6. If the cluster subnet does not meet the requirements:

    6.1.Select an existing cloud router or create a new one. The cluster subnet will be connected to the router. If you select an existing router without internet access or a new router, it will be automatically connected to the internet.

    6.2.Click Connect router and address.

Public IP addresses will be attached to all nodes in the node group simultaneously, with a dedicated public IP address for each node.

Detach a public IP address

  1. In the Control panel, in the top menu, click Products and select Cloud Databases.
  2. Open the tab Active.
  3. Open the database cluster page → tab Settings.
  4. In the node group card, in the Public access line, click .
  5. Click Detach. Public IP addresses will be detached from all nodes in the node group simultaneously.