Google Compute Engine上Node.js应用外部IP无法访问的问题求助

Hey there! I’ve run into this exact issue a few times with GCE instances—let’s walk through the most common fixes to get your app accessible via the external IP.

1. Check GCP Firewall Rules (Most Likely Culprit) #

GCE blocks incoming traffic by default unless you explicitly allow it. Here’s how to fix that:

• Head to the GCP Console, navigate to VPC Network > Firewall
• Look for an existing rule that allows inbound traffic on port 3000. It should have:
  • Direction: Ingress
  • Targets: Either "All instances in network" or a target tag that’s applied to your instance
  • Source IP ranges: 0.0.0.0/0 (to allow all IPs, or restrict to your specific IP if needed)
  • Protocols and ports: tcp:3000
• If no such rule exists, create a new one:
  • Name it something like allow-nodejs-3000
  • Set Direction to Ingress, Action to Allow
  • For Targets, choose "Specified target tags" and add a tag (e.g., nodejs-app)—then make sure this tag is applied to your GCE instance (we’ll cover that next)
  • Source IP ranges: 0.0.0.0/0
  • Protocols and ports: Select "Specified protocols and ports", check TCP, and enter 3000

2. Verify Instance Network Tags #

Your firewall rule needs to target your instance via tags:

• Go to Compute Engine > VM instances
• Click on your instance, then edit it
• Under "Network tags", add the tag you used in the firewall rule (e.g., nodejs-app)
• Save the changes—this ensures the firewall rule applies to your instance

3. Check Instance-Level Firewall #

If your GCE instance has a local firewall (like ufw on Ubuntu or firewalld on CentOS), it might be blocking port 3000:

• For Ubuntu/Debian: Run sudo ufw allow 3000/tcp then sudo ufw reload
• For CentOS/RHEL: Run sudo firewall-cmd --add-port=3000/tcp --permanent then sudo firewall-cmd --reload

4. Confirm App is Listening on 0.0.0.0 #

Even though your console says http://0.0.0.0:3000, double-check with a command to be sure:

• Run ss -tulpn | grep 3000 on your instance
• Look for a line where the "Local Address" is 0.0.0.0:3000 or :::3000 (IPv6). If it shows 127.0.0.1:3000, your app is only listening locally—you’ll need to update your Node.js code to bind to 0.0.0.0 instead of localhost.

5. Ensure External IP is Correct and Static #

• Confirm you’re using the correct external IP from your instance’s details page (under "External IP")
• If you’re using an ephemeral (temporary) IP, restarting the instance will change it. To avoid this, convert it to a static IP:
  • Go to VPC Network > External IP addresses
  • Find your instance’s IP, click the "Type" dropdown, and select "Static"
  • Assign a name and save

After going through these steps, try accessing http://<your-external-ip>:3000 again—it should work!

内容的提问来源于stack exchange，提问作者vam