expose-service.md

post_title	menu_order
Exposing a Service	5

DC/OS agent nodes can be designated as public or private during installation. Public agent nodes provide access from outside of the cluster via infrastructure networking to your DC/OS services. By default, services are launched on private agent nodes and are not accessible from outside the cluster.

To launch a service on a public node, you must create a Marathon app definition with the "acceptedResourceRoles":["slave_public"] parameter specified and configure an edge load balancer and service discovery mechanism.

Prerequisite:

• DC/OS is installed
• DC/OS CLI is installed

1. Create a Marathon app definition with the "acceptedResourceRoles":["slave_public"] parameter specified. For example:

   {
       "id": "/product/service/myapp",
       "container": {
       "type": "DOCKER",
       "docker": {
             "image": "group/image",
             "network": "BRIDGE",
             "portMappings": [
               { "hostPort": 80, "containerPort": 80, "protocol": "tcp"}
             ]
           }
       },
       "acceptedResourceRoles": ["slave_public"],
       "instances": 1,
       "cpus": 0.1,
       "mem": 64
   }

   For more information about the acceptedResourceRoles parameter, see the Marathon REST API documentation.

2. Add the your app to Marathon by using this command, where myapp.json is your app:

   dcos marathon app add myapp.json

   If this is added successfully, there is no output.

   Tip: You can also add your app by using the Services tab of DC/OS GUI.

3. Verify that the app is added with this command:

   dcos marathon app list

   The output should look like this:

   ID      MEM  CPUS  TASKS  HEALTH  DEPLOYMENT  CONTAINER  CMD
       /myapp   64  0.1    0/1    ---      scale       DOCKER   None

   Tip: You can also view deployed apps by using the Services tab of DC/OS GUI.

4. Configure an edge load balancer and service discovery mechanism.

   • AWS users: If you installed DC/OS by using the AWS CloudFormation templates, an ELB is included. However, you must reconfigure the health check on the public ELB to expose the app to the port specified in your app definition (e.g. port 80).
   • All other users: You can use Marathon-LB, a rapid proxy and load balancer that is based on HAProxy.

5. Go to your public agent to see the site running. For information about how to find your public agent IP, see the documentation.

   You should see the following message in your browser:

   

Next steps

Learn how to load balance your app on a public node using Marathon-LB.