# Ip address of kubernetes cluster for firewall

**URL:** <https://discuss.kubernetes.io/t/ip-address-of-kubernetes-cluster-for-firewall/3452>\
**Category:** General Discussions\
**Created:** [November 10, 2018, 1:50pm UTC](https://discuss.kubernetes.io/t/ip-address-of-kubernetes-cluster-for-firewall/3452 "2018-11-10T13:50:03Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![david.ooi](https://avatars.discourse-cdn.com/v4/letter/d/73ab20/32.png) [@david.ooi](https://discuss.kubernetes.io/u/david.ooi)\
**Post date:** [November 10, 2018, 1:50pm UTC](https://discuss.kubernetes.io/t/ip-address-of-kubernetes-cluster-for-firewall/3452/1 "2018-11-10T13:50:03Z")

</div>

Hi guys,

I need some help on understanding the kubernetes cluster networking better.

Currently i am using kubernetes at GCP.

i have run a made a cluster and deploy my own service into the cluster.

The service running fine till at a point that my service need to connect to an external database.

My databases is located and Azure with my networking guys need to open specific port and IP only to the services tat are using the DB. What i can’t figure out is in kubernetes cluster what IP should i allow in my firewall configuration to make this work.

thank you

regards  
David Ooi

---

<div class="post-metadata">

**Author:** ![rata](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/rata/32/18244_2.png) [@rata](https://discuss.kubernetes.io/u/rata)\
**Post date:** [November 10, 2018, 3:26pm UTC](https://discuss.kubernetes.io/t/ip-address-of-kubernetes-cluster-for-firewall/3452/2 "2018-11-10T15:26:32Z")

</div>

What you are looking for is this: [https://cloud.google.com/solutions/using-a-nat-gateway-with-kubernetes-engine](https://cloud.google.com/solutions/using-a-nat-gateway-with-kubernetes-engine)

I think that explains pretty much the networking issues on normal circumstances and provided a solution for GCP. That should be it 🙂

---

<div class="post-metadata">

**Author:** ![david.ooi](https://avatars.discourse-cdn.com/v4/letter/d/73ab20/32.png) [@david.ooi](https://discuss.kubernetes.io/u/david.ooi)\
**Post date:** [November 11, 2018, 1:41am UTC](https://discuss.kubernetes.io/t/ip-address-of-kubernetes-cluster-for-firewall/3452/3 "2018-11-11T01:41:10Z")

</div>

Hi thanks rata ,

I will try this and see how it goes.

Thank for the reply