etcd nodes:
Nodes with the role etcd

###### etcd nodes - Inbound rules

Protocol | Port | Source | Description
--- | --- | --- | ---

TCP

2379

- etcd nodes
- controlplane nodes

etcd client requests

TCP

2380

- etcd nodes
- controlplane nodes

etcd peer communication

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking

TCP

10250

- controlplane nodes

kubelet

###### etcd nodes - Outbound rules

Protocol | Port | Destination | Description
--- | --- | --- | ---

TCP

443

- Rancher nodes

Rancher agent

TCP

2379

- etcd nodes

etcd client requests

TCP

2380

- etcd nodes

etcd peer communication

TCP

6443

- controlplane nodes

Kubernetes apiserver

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking

controlplane nodes:
Nodes with the role controlplane

###### controlplane nodes - Inbound rules

Protocol | Port | Source | Description
--- | --- | --- | ---

TCP

80

- Any that consumes Ingress services

Ingress controller (HTTP)

TCP

443

- Any that consumes Ingress services

Ingress controller (HTTPS)

TCP

6443

- etcd nodes
- controlplane nodes
- worker nodes

Kubernetes apiserver

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking

TCP

10250

- controlplane nodes

kubelet

TCP/UDP

30000-32767

- Any source that consumes NodePort services

NodePort port range

###### controlplane nodes - Outbound rules

Protocol | Port | Destination | Description
--- | --- | --- | ---

TCP

443

- Rancher nodes

Rancher agent

TCP

2379

- etcd nodes

etcd client requests

TCP

2380

- etcd nodes

etcd peer communication

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking

TCP

10250

- etcd nodes
- controlplane nodes
- worker nodes

kubelet

worker nodes:
Nodes with the role worker

###### worker nodes - Inbound rules

Protocol | Port | Source | Description
--- | --- | --- | ---

TCP

80

- Any that consumes Ingress services

Ingress controller (HTTP)

TCP

443

- Any that consumes Ingress services

Ingress controller (HTTPS)

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking

TCP

10250

- controlplane nodes

kubelet

TCP/UDP

30000-32767

- Any source that consumes NodePort services

NodePort port range

###### worker nodes - Outbound rules

Protocol | Port | Destination | Description
--- | --- | --- | ---

TCP

443

- Rancher nodes

Rancher agent

TCP

6443

- controlplane nodes

Kubernetes apiserver

UDP

8472

- etcd nodes
- controlplane nodes
- worker nodes

Canal/Flannel VXLAN overlay networking