Exposing Apps using Edge Router



In this section we will make app2 available from outside the cluster by running it on a public agent node with Marathon-LB.


DC/OS has two different node types: private and public agent nodes. Private agent nodes (usually) do not have ingress access from outside of the cluster, while public agent nodes allow for ingress access from outside the cluster.

By default, Marathon starts applications and services on private agent nodes, which cannot be accessed from the outside, the cluster. To expose an app to the outside we usually use a load balancer running on one of the public nodes. We will revisit the topic of load balancing (and different choices for load balancers) later in this tutorial, but for now, we choose Marathon-LB as our load balancer.

  • Install Marathon-LB: dcos package install marathon-lb
  • Check that it is running: dcos task and identify the IP adress of the public agent node (Host) where Marathon-LB is running,
    • Warning: If you started your cluster using a cloud provider (especially AWS) dcos task might show you the private ip address of the host, which is not resolvable from outside the cluster (e.g., if you see something like it is very likely a private address). In that case, you need to retrieve the public IP from your cloud provider. On AWS, go to the console and then search for the instance with the private IP shown by dcos task. The public IP will be listed in the instance description as Public IP.
  • Connect to the webapp (from your local machine) via <Public IP>:10000. You should see a rendered version of the web page including the physical node and port app2 is running on.
  • Use the web form to add a new Key:Value pair
  • You can verify the new key was added in two ways:
    1. Check the total number of keys using app1: dcos task log app1
    2. Check redis directly
    • SSH into node where redis is running: dcos node ssh --master-proxy --mesos-id=$(dcos task redis --json | jq -r '.[] | .slave_id')
    • NOTE: This requires you to have the key required to ssh to the machines added to your local ssh agent (e.g., via ssh-add key).
    • As redis is running in docker container let us list all docker container docker ps and get the ContainerID.
    • Connect to a bash session to the running container: sudo docker exec -i -t CONTAINER_ID /bin/bash
    • Start the redis CLI: redis-cli
    • Check value is there: get <newkey>


Congratulations! You’ve used Marathon-LB to expose your application to the public and added a new key to redis using the web frontend.