thank you for your reply. but in my case, all nodes are having firewall disable.
so when I deploy service, service external port is not showing up on UCP manager nodes.
if I deploy service on UCP manager and UCP DTR nodes, then I can see external port is listening on all 3 UCP manager nodes. so somewhere I am not able to understand why this happening. is there any rule/logic behind service deploy on UCP manager nodes against UCP worker node ?