Cluster External Network Access Guide (Windows)

After completing the cluster intranet deployment, configure external network access to allow clients outside the local network to connect. Two modes are available: **Direct Connection Mode** and **Proxy Mode**.

For cluster deployments, **Proxy Mode is strongly recommended** because not all machines in the cluster may have public IP addresses. [Learn about the differences between Direct Connection and Proxy Mode](https://www.pingxingyun.com/contribute/detail?topicId=10105&categoryId=3)

## Proxy Mode

In Proxy Mode, all external client traffic is relayed through the master node. Rendering nodes do not need individual public IPs, and port `10002` does not need to be opened on the rendering node.

> The example below assumes that all rendering nodes and master nodes are on the same network segment. For edge node deployment across different networks, refer to the corresponding edge cluster deployment guide.

### Configuration Steps

1. **Enable proxy on the management node** - Double-click `LarkXRLauncher.exe` on the master node and open **Configure Management Node**. Enable the **Render WsConn Proxy** toggle.

![Management node - enable rendering server connection proxy](https://docs.paraverse.cc/media/202504/e72f330f8b554c07b18b1433e16c859d6247.png)

2. **Configure the rendering node** - Double-click `LarkXRLauncher.exe` on the rendering node and open **Configure Rendering Node**. Set:
   - **Admin Server URL** to the master node URL (e.g., `http://192.168.31.10:8181`)
   - **Local IP** to the rendering server's internal IPv4 address
   - **Preferred Public IP** to the external IP address (e.g., `112.6.266.121`)

![Rendering node - proxy mode configuration](https://docs.paraverse.cc/media/202504/0019d8e2dad54e39a85cd59f8f7343c08159.png)

## Required Ports

| Node | Protocol | Port | Requirement | Purpose |
|---|---|---|---|---|
| Management Node | TCP | 8181 | **Required** | Frontend page (nginx) and backend interface |
| Management Node | TCP | 8182 | Not required | Backend page nginx forwarding |
| Management Node | TCP | 8184 | **Required** | Management service |
| Rendering Node | TCP | 8089 | **Required** | Sync and proxy service |
| Rendering Node | UDP | 10011-10040 | **Required** | Audio and video streaming (one port per concurrency) |