6

I see a lot of examples running multiple Docker nodes in swarm mode, but they all mention that the nodes shares a local/private network. I was wondering, is it possible to connect two hosts on a swarm that are not on a private network but can still reach each others over IP and having the correct ports setup ?

enter image description here

This would not be for a production setup.

Are there any Swarm mechanisms that prevent such architecture ?

Thank you for your time !

thiout_p
  • 717
  • 11
  • 15

2 Answers2

8

You can connect swarm nodes over the public internet. What's needed is:

  1. Routeable IP addresses for each node, this may require a VPN between nodes
  2. Firewall rules to allow 2376/tcp, 7946/tcp+udp, 4789/udp between each node
  3. Low latency, if the heartbeat timeout is exceeded, nodes will be flagged as down and workload will migrate

Because of the last requirement, typically people will install nodes in the same region but multiple AZ's. And when you get to multiple regions, you typically see multiple clusters to keep the latency down within a cluster.

BMitch
  • 231,797
  • 42
  • 475
  • 450
  • Thank you very much for your answer, yes I understand that latency is critical. Thank you. – thiout_p Jan 09 '19 at 16:56
  • 1
    @Sandi availability zone. Nodes in separate zones are less likely to simultaneously fail since they should have separate power, networking, physical location, etc. – BMitch Nov 20 '20 at 01:05
  • @BMitch Thank you very much! I will Google more about it. – Sandi Nov 20 '20 at 08:29
0

Running this command helped me have all nodes available across all continents: sudo docker swarm update --dispatcher-heartbeat 120s

Arkadiy Bolotov
  • 314
  • 2
  • 8