Google Container Engine: Assign a static IP address to outbound traffic nodes

Question

I am using the Google Container Engine to start a cluster that connects to remote services (in another data center / provider). The containers that connect may not have the kubernetes service associated with them and do not need external external IP addresses. However, I want to configure the firewall rules on remote computers and have a known subnet that the nodes will be inside when I expand / reduce the cluster, or if the node goes down and rebuilds.

When looking at Google networks, they appear to be connected to internal networks (e.g. 10.128.0.0, etc.). An external IP allows me to set single static IP addresses, but not a range, and I don’t see how to apply this to a node - applying to a load balancer will not change the outgoing IP address.

Is there a way to reserve a block of IP addresses for my cluster for use in my firewall rules on my remote servers? Or is there some other solution that I am missing for this kind of thing?

---

Answer 1

The right solution for this is to use a VPN to connect two networks. Google Cloud VPN allows you to create this on the side of Google.