Port 443 - K3s

Hello… I have a strange issue that maybe someone knows the answer to. After I setup Gitpod, it also sets up a Loadbalancer on port 443.

Here is the strange part. I added a second IP to the machine for other purposes and gitpod seems to be listening on that IP Address too. Is this something with Gitpod or the K3S LoadBalancer. Any ideas?

I think that k3s binds their port 433 to all interfaces ( If you would like to change this you need to check the k3s docs how to configure the IP/interfaces k3s should listen on.

Yeah, I ran into that too. It’s k3s’ ServiceLB just being special. My solution was to run k3s with ServiceLB disabled, and instead run MetalLB. The only catch here is that you have to set aside a portion of your network for MetalLB to consume. Just a few IPs, pretty much one per LB you’re going to have in the cluster. So if you’re only going to have gitpod running on it, which channels everything through it’s proxy you can get away with just giving it a /30 or so.

The way MetalLB handles it is by spinning up a virtual IP for each LB to handle forwarding, and broadcasting the mac for that IP as the host interface. Pretty simple. If you comment and want my configs I can share a walk through.

1 Like