Cluster external network（Linux Docker）

Follow the internal network deployment process to ensure the system is running smoothly, and then configure the external network access policy. There are two configuration methods: Direct Connection Mode and Proxy Mode[ Learn more about Proxy Mode](https://www.pingxingyun.com/contribute/detail?topicId=10105&categoryId=3)

## Proxy Mode：

1. **Open the `larkxr-center-docker/admin/application.yaml` file**

-  Enable the WebSocket proxy: Search for the keyword “proxy” in the file and set ，enable   to   true

- After saving the changes, restart the admin Docker service. Stop the service first:   sh stop.sh  , then start the service：`sh start.sh`

![](https://docs.pingxingyun.com/media/202503/0d4d1d603ecb4b258f3c4011067576098621.png)

2.  **Open the `larkxr-render-docker/application.properties` file**

- Set the prefer-public-ip：Search for the keyword“pxy.host.prefer-public-ip”n the file and set it to the external IP address.
   - After saving the changes,restart the render Docker service. Stop the service first: `sh stop.sh`，then start the service:  `sh start.sh`

**Network Port Opening/Mapping Policy**

|Node |  Type | Port  |Purpose   | Modification  |
| ------------ | ------------ | ------------ | ------------ | ------------ |
|Management Node| TCP  |  8181 | **Required**，for NGINX forwarding of the front-end page and back-end interface  |[Modify Port 8181](https://www.pingxingyun.com/question/detail?topicId=10078&categoryId=2 "请参考")   |
|Management Node| TCP  | 8182  | **Not Required**， for NGINX forwarding of the back-end page   |  [Modify Port 8182](https://www.pingxingyun.com/question/detail?topicId=10114&categoryId=2 "请参考") |
|Render Node| UDP  | 10011-10040  |  **Required**，for audio and video ports, with one port representing one concurrent connection  | [Modify Audio/Video Ports](https://www.pingxingyun.com/question/detail?topicId=10122&categoryId=2 "修改音视频端口")  |

## Direct Connection Mode

If the server has a public IP address, direct connection mode can be used. When configured for HTTPS access, it is recommended to use proxy mode; otherwise, the render node must be configured with an SSL certificate to use the WSS protocol.

**Configuration Requirements：**

**Open the `larkxr-render-docker/application.properties` file**

- Set the prefer-public-ip：Search for the keyword“pxy.host.prefer-public-ip”n the file and set it to the external IP address.
   - Set the public IP: Search for the keyword “pxy.host.public-ip” in the file and set it to the external IP address.
   - After saving the changes, restart the render Docker service. Stop the service first:   `sh stop.sh`  , then start the service:   `sh start.sh  `

**Network Port Opening/Mapping Policy**

|Node|  Type | Port  |Purpose   | Modification  |
| ------------| ------------ | ------------ | ------------ | ------------ |
|Management Node| TCP  |  8181 | **Required**，for NGINX forwarding of the front-end page and back-end interface  |[Modify Port 8181](https://www.pingxingyun.com/question/detail?topicId=10078&categoryId=2 "请参考")   |
|Management Node| TCP  | 8182  | **Not Required**，for NGINX forwarding of the back-end page   |  [Modify Port 8182](https://www.pingxingyun.com/question/detail?topicId=10114&categoryId=2 "请参考") |
| Render Node| TCP  | 10002  | **Required**，for WebSocket communication port  | [Modify Port 10002](https://www.pingxingyun.com/question/detail?topicId=10119&categoryId=2 "修改10002端口")  |
| Render Node| UDP  | 10011-10040  |  **Required**，for audio and video ports, with one port representing one concurrent connection  | [Modify Audio/Video Ports](https://www.pingxingyun.com/question/detail?topicId=10122&categoryId=2 "修改音视频端口")  |