# GOOGLE cloud ES cluster are not able to access from outside

**URL:** <https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085>\
**Category:** Elasticsearch\
**Created:** [June 20, 2017, 11:12am UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085 "2017-06-20T11:12:51Z")\
**Posts on this page:** 8\
**Page:** 1

<div class="post-metadata">

**Author:** ![babu.ganesh0708](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/babu.ganesh0708/32/68550_2.png) [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\
**Post date:** [June 20, 2017, 11:12am UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/1 "2017-06-20T11:12:51Z")

</div>

Hi All,

I have installed ES 2.4.5 in google cloud VM and the ES instances are up and running fine without issues.

But i couldn't able to access it from outside and below is the URL i am trying access it in the browser.  
**[http://10.128.0.4:9200](http://10.128.0.4:9200)**

Error throwing as,  
This site can’t be reached

```
10.128.0.4 took too long to respond.
Search Google for 128 9200
ERR_CONNECTION_TIMED_OUT

```

I have installed GCE Plugin in each node and restarted the ES and the following config changes were added in the elasticsearch.yml file,

> ```
> cloud:
> gce:
> project_id: tribal-firefly-170712
> zone: us-central1-c
> discovery:
> type: gce
> 
> ```

```
network.host: _gce_

```

I can able to access the ES using the curl command, but not able to access in the browser

> babu.ganesh0708@esgraylog1:~/elasticsearch-2.4.5/bin$ curl -XGET '[http://10.128.0.4:9200/\_cluster/health?pretty=true](http://10.128.0.4:9200/_cluster/health?pretty=true)'  
> {  
> "cluster\_name" : "ES\_GRAYLOG\_DEV",  
> "status" : "green",  
> "timed\_out" : false,  
> "number\_of\_nodes" : 1,  
> "number\_of\_data\_nodes" : 0,  
> "active\_primary\_shards" : 0,  
> "active\_shards" : 0,  
> "relocating\_shards" : 0,  
> "initializing\_shards" : 0,  
> "unassigned\_shards" : 0,  
> "delayed\_unassigned\_shards" : 0,  
> "number\_of\_pending\_tasks" : 0,  
> "number\_of\_in\_flight\_fetch" : 0,  
> "task\_max\_waiting\_in\_queue\_millis" : 0,  
> "active\_shards\_percent\_as\_number" : 100.0  
> }

Please correct me if i am doing anything wrong in the configuration changes.  
It would be really helpful.

Thanks,  
Ganeshbabu R

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 20, 2017, 11:37am UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/2 "2017-06-20T11:37:03Z")

</div>

I guess you ran the curl command from the machine where elasticsearch is running, right?

May be you did not open port 9200 to internet on GCP? (Well this is dangerous to do)

---

<div class="post-metadata">

**Author:** ![babu.ganesh0708](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/babu.ganesh0708/32/68550_2.png) [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\
**Post date:** [June 20, 2017, 11:54am UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/3 "2017-06-20T11:54:12Z")

</div>

Yes @dadoonet I ran the command from the machine.

So you want me to add the new firewall rule in the GCP so that it can be accessible from outside.

---

<div class="post-metadata">

**Author:** ![Christian\_Dahlqvist](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christian_dahlqvist/32/4617_2.png) [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)\
**Post date:** [June 20, 2017, 12:02pm UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/4 "2017-06-20T12:02:58Z")

</div>

Based on the [documentation](https://www.elastic.co/guide/en/elasticsearch/plugins/current/discovery-gce-network-host.html) it looks like `_gce_` binds to the private IP only. Where are you trying to connect from?

---

<div class="post-metadata">

**Author:** ![babu.ganesh0708](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/babu.ganesh0708/32/68550_2.png) [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\
**Post date:** [June 20, 2017, 12:16pm UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/5 "2017-06-20T12:16:16Z")

</div>

Hi @Christian_Dahlqvist

Below are the Internal IP -\> 10.128.0.4 & External IP -\> 104.154.145.13 of my Google cloud Platform.

After the ES started the following logs are generated,

```
[2017-06-20 12:03:04,455][INFO][node] [esgraylog1_DEV_DATA] initialized
[2017-06-20 12:03:04,455][INFO][node] [esgraylog1_DEV_DATA] starting ...
[2017-06-20 12:03:05,290][INFO][transport] [esgraylog1_DEV_DATA] publish_address {10.128.0.4:9301}, bound_addresses {10.128.0.4:9301}
[2017-06-20 12:03:05,302][INFO][discovery] [esgraylog1_DEV_DATA] ES_GRAYLOG_DEV/crNzuNGiRKyiEWqKYmYIFQ
[2017-06-20 12:03:05,357][INFO][cloud.gce] [esgraylog1_DEV_DATA] starting GCE discovery service
[2017-06-20 12:03:06,293][WARN][cloud.gce] [esgraylog1_DEV_DATA] Problem fetching instance list for zone us-central1-c
[2017-06-20 12:03:06,293][WARN][cloud.gce] [esgraylog1_DEV_DATA] disabling GCE discovery. Can not get list of nodes
[2017-06-20 12:03:17,394][INFO][cloud.gce] [esgraylog1_DEV_MASTER] starting GCE discovery service
[2017-06-20 12:03:17,450][WARN][cloud.gce] [esgraylog1_DEV_MASTER] Problem fetching instance list for zone us-central1-c
[2017-06-20 12:03:17,450][WARN][cloud.gce] [esgraylog1_DEV_MASTER] disabling GCE discovery. Can not get list of nodes
[2017-06-20 12:03:21,327][INFO][cloud.gce] [esgraylog1_DEV_DATA] starting GCE discovery service
[2017-06-20 12:03:21,391][WARN][cloud.gce] [esgraylog1_DEV_DATA] Problem fetching instance list for zone us-central1-c
[2017-06-20 12:03:21,391][WARN][cloud.gce] [esgraylog1_DEV_DATA] disabling GCE discovery. Can not get list of nodes
[2017-06-20 12:03:30,134][WARN][discovery] [esgraylog1_DEV_MASTER] waited for 30s and no initial state was set by the discovery
[2017-06-20 12:03:30,173][INFO][http] [esgraylog1_DEV_MASTER] publish_address {10.128.0.4:9200}, bound_addresses {10.128.0.4:9200}

```

So after ES instance started I tried accessing from the chrome browser with the URL -- **[http://10.128.0.4:9200](http://10.128.0.4:9200)** to check the ES node details from outside.

Please correct me if i am doing anything wrong.

Regards,  
Ganeshbabu R

---

<div class="post-metadata">

**Author:** ![babu.ganesh0708](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/babu.ganesh0708/32/68550_2.png) [@babu.ganesh0708](https://discuss.elastic.co/u/babu.ganesh0708)\
**Post date:** [June 21, 2017, 10:31am UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/6 "2017-06-21T10:31:57Z")

</div>

Hi @dadoonet

I tried adding the new firewall setup in the GCP but still i am unable to access from outside

Below are the screenshot of Firewall rules GCP

 ![](https://us1.discourse-cdn.com/elastic/original/3X/a/8/a8977e625a5669babd47349b723e70737c2a87ca.png)

Could you please help me to resolve this issue?

Thanks,  
Ganeshbabu R

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [June 30, 2017, 3:12pm UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/7 "2017-06-30T15:12:56Z")

</div>

I wonder if you should try this instead:

```auto
network.host: _gce:hostname_

```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 28, 2017, 3:13pm UTC](https://discuss.elastic.co/t/google-cloud-es-cluster-are-not-able-to-access-from-outside/90085/8 "2017-07-28T15:13:05Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
