# spicedb


04/29/2022, 3:08 AM
I have a question on deploying a spicedb cluster on k8s. The spicedb clients are going to be running external to the cluster and will need to send check requests to spicedb over the internet. While client side loadbalancing with the grpc-go extension described in the blog is attractive, it does mean that I will need to expose all my k8s worker IPs to the internet. Something I am not keen on doing. I could deploy an ingress or an external load balancer that can load balancing grpc requests, but such a load balancer would be oblivious of the spicedb hash ring and is likely to forward the request to the incorrect spicedb instance. What's the best practice for load balancing a spicedb cluster to clients over the internet.