Skip to main content

Network management guide

You’ll open a network path so Xooshe can reach the cluster API, and so apps can serve public URLs.

Cluster API reachability​

When you upload a connection file, the API server address inside it must be reachable from Xooshe’s servers (or from your private link, if your team uses one).

Checklist:

  1. API server URL resolves and accepts TLS from the internet or the agreed private network.
  2. Firewalls allow Xooshe’s egress IPs (ask support for the current list for your region).
  3. The user in the connection file can manage the resources you expect (environments, apps, nodes).

If the cluster will not connect: re-check API reachability and the connection file, then re-add the cluster.

Public URLs for apps​

  1. Configure domain / TLS in cluster settings.
  2. On the app, enable a public URL / domain.
  3. Point DNS (A/CNAME) at the address Xooshe or your load balancer shows.
  4. Wait for DNS and certificates, then test in a browser.

If a public URL fails: confirm DNS, cluster domain/TLS settings, and that the app enabled a public URL.

SSH for full node management​

Some node operations need SSH from Xooshe to your servers. Allow the SSH command’s target user/port from the Nodes UI, and do not expose SSH more broadly than necessary.