GUI on a separate IP / VLAN / network

[vampirebyte]

Hello,

I’m trying to setup the GUI listener to 80 and 443 on a separate IP (which is a different physical NIC, statically assigned) and it won’t allow me. it seems that whatever I choose from the dropdown, it still listens on all interfaces. Is this a bug or I’m missing something in the configuration?

The reason I want to do this is to use port 443 for the GUI (with native cert) and limit the connections from our management VLAN, while all the apps are served by traefik with SSL enabled cert-manager (also listening on 80 & 443, hence the conflict).

I also tried to setup the Apps / kubernetes node IP to the 192.169.10.x network, but the same thing, web-interface GUI always listens to both interfaces.

Help please

[essinghigh]

I haven’t had much of a play around with the Kubernetes config, but it wouldn’t surprise me if the application needs a restart after changing the listen address. Did you try this? Maybe it does it automatically, not sure.

In relation to your previous thread, you could also do this by configuring “Allowed IP Addresses” in System Settings → Advanced, and changing the interface sshd listens on (assuming it’s enabled).