# Nginx ingress controller with type: NodePort refused request from public IP

**URL:** https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747
**Category:** General Discussions
**Created:** [February 14, 2019, 11:13am UTC](https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747 "2019-02-14T11:13:11Z")
**Posts on this page:** 3
**Page:** 2

<div class="post-metadata">

### Author: ![Justinus\_Hermawan](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/justinus_hermawan/32/2221_2.png) [@Justinus\_Hermawan](https://discuss.kubernetes.io/u/Justinus_Hermawan)
#### Post date: [February 15, 2019, 1:31am UTC](https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747/21 "2019-02-15T01:31:11Z")

</div>

I change kube-apiserver nodeportrange into 80-32767 and set fixed nodePort for my ingress service and it works now.

---

<div class="post-metadata">

### Author: ![macintoshprime](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/macintoshprime/32/7121_2.png) [@macintoshprime](https://discuss.kubernetes.io/u/macintoshprime)
#### Post date: [February 15, 2019, 1:41am UTC](https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747/22 "2019-02-15T01:41:53Z")

</div>

Being that you are on AWS you can use their LoadBalancer, set up guide with nginx [here](https://kubernetes.github.io/ingress-nginx/deploy/#aws).

I would avoid expanding the range like that, not sure what things might get overridden if all those ports are being consumed by nodeports.

---

<div class="post-metadata">

### Author: ![mrbobbytables](https://sea2.discourse-cdn.com/flex016/user_avatar/discuss.kubernetes.io/mrbobbytables/32/7_2.png) [@mrbobbytables](https://discuss.kubernetes.io/u/mrbobbytables)
#### Post date: [February 15, 2019, 2:27am UTC](https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747/23 "2019-02-15T02:27:24Z")

</div>

> [@Justinus\_Hermawan](#):
>
> I change kube-apiserver nodeportrange into 80-32767 and set fixed nodePort for my ingress service and it works now.

I would definitely avoid doing that. That is down in the privileged port range. I would follow @macintoshprime suggestion, or pursue other alternative means.

[Previous page](https://discuss.kubernetes.io/t/nginx-ingress-controller-with-type-nodeport-refused-request-from-public-ip/4747.md?page=1)