Allow inbound access to MLflow

Create a firewall rule in Google Cloud Console to expose required ports for the MLflow UI and Model Serving API.

Note

For help with GCP setup, see the Learning Path Getting started with Google Cloud Platform .

Configure the firewall rule in Google Cloud Console

To configure a firewall rule for the MLflow UI and the Model Serving API:

  1. Navigate to the Google Cloud Console , go to VPC Network > Firewall, and select Create firewall rule.

Image Alt Text:Google Cloud Console VPC Network Firewall page showing the Create firewall rule button in the top menu barCreate a firewall rule in Google Cloud Console

  1. Create a firewall rule that exposes the ports required for MLflow.

  2. Set Name to allow-mlflow-ports, then select the network you want to bind to your virtual machine.

  3. Set Direction of traffic to Ingress, set Action on match to Allow, set Targets to All instances in the network, and set Source IPv4 ranges to 0.0.0.0/0.

Image Alt Text:Google Cloud Console Create firewall rule form with Name set to allow-mlflow-ports and Direction of traffic set to IngressConfiguring the allow-mlflow-ports firewall rule

  1. Under Protocols and ports, select Specified protocols and ports.
  2. Select the TCP checkbox and enter:
    

        
        
5000,6000

    

Use port mapping 5000 for the MLflow Tracking UI and 6000 for the MLflow Model Serving API.

Image Alt Text:Google Cloud Console Protocols and ports section with TCP selected and ports 5000 and 6000 enteredSetting MLflow ports in the firewall rule

  1. Select Create.

What you’ve accomplished and what’s next

You’ve created a firewall rule to expose the MLflow UI and the model serving API. You also enabled external access to monitor experiments and access deployed models.

Next, you’ll create a C4A Arm virtual machine and attach it to this firewall rule.

Back
Next