public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 04:28:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

finishing ports draft

Browse Source
This commit is contained in:
Mark Bishop
2018-09-12 11:21:07 -07:00
parent 715679d4dc
commit 00ce26e61c
5 changed files with 81 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/installation/references/_index.md
+7 -10
View File
@@ -9,13 +9,13 @@ To operate properly, Rancher requires a number of ports to be open on Rancher no
## Rancher Nodes
The following table lists the ports that need to be open to/from nodes that are running the `rancher/rancher` container ([Single Node Install]({{< baseurl >}}/rancher/v2.x/en/installation/single-node-install/)) or `cattle` deployment pods ([High Availability Install]({{< baseurl >}}/rancher/v2.x/en/installation/ha-server-install/)).
The following table lists the ports that need to be open to and from nodes that are running the `rancher/rancher` container ([Single Node Install]({{< baseurl >}}/rancher/v2.x/en/installation/single-node-install/)) or `cattle` deployment pods ([High Availability Install]({{< baseurl >}}/rancher/v2.x/en/installation/ha-server-install/)).
{{< ports-rancher-nodes >}}
## Kubernetes Cluster Nodes
The required ports for cluster nodes vary across different methods for creating clusters.
The ports required to be open for cluster nodes changes depending on how the cluster was launched. Each of the tabs below list the ports that need to be opened for different [cluster creation options]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/#cluster-creation-options).
>**Tip:**
>
@@ -23,7 +23,7 @@ The required ports for cluster nodes vary across different methods for creating
{{% tabs %}}
{{% tab "IaaS Clusters" %}}
{{% tab "Node Pools" %}}
The following table depicts the port requirements for [Rancher Launched Kubernetes]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/) with nodes created in an [Infrastructure Provider]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/node-pools/).
@@ -34,7 +34,7 @@ The following table depicts the port requirements for [Rancher Launched Kubernet
{{% /tab %}}
{{% tab "Custom Cluster" %}}
{{% tab "Custom Nodes" %}}
The following table depicts the port requirements for [Rancher Launched Kubernetes]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/) with [Custom Nodes]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/custom-nodes/).
@@ -83,7 +83,7 @@ These ports are typically opened on your Kubernetes nodes, regardless of what ty
### Local Node Traffic
Ports marked as `local traffic` in the above requirements (e.g. `9099/tcp`) are used for Kubernetes healthchecks (`livenessProbe` and`readinessProbe`).
Ports marked as `local traffic` (i.e., `9099 TCP`) in the above requirements are used for Kubernetes healthchecks (`livenessProbe` and`readinessProbe`).
These healthchecks are executed on the node itself. In most cloud environments, this local traffic is allowed by default.
However, this traffic may be blocked when:
@@ -91,12 +91,11 @@ However, this traffic may be blocked when:
- You have applied strict host firewall policies on the node.
- You are using nodes that have multiple interfaces (multihomed).
In these cases, you have to explicitly allow this traffic in your host firewall, or in case of public/private cloud hosted machines (i.e. AWS or OpenStack), in your security group configuration. Keep in mind that when using a security group as source or destination in your security group, explicitly opening ports only applies to the private interface of the nodes/instances.
In these cases, you have to explicitly allow this traffic in your host firewall, or in case of public/private cloud hosted machines (i.e. AWS or OpenStack), in your security group configuration. Keep in mind that when using a security group as source or destination in your security group, explicitly opening ports only applies to the private interface of the nodes / instances.
### Rancher AWS EC2 security group
When using the [AWS EC2 node driver]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/node-pools/ec2/) to provision cluster nodes in Rancher
you can choose to let Rancher create a Security Group called `rancher-nodes`. The following rules are automatically added to this Security Group.
When using the [AWS EC2 node driver]({{< baseurl >}}/rancher/v2.x/en/cluster-provisioning/rke-clusters/node-pools/ec2/) to provision cluster nodes in Rancher, you can choose to let Rancher create a security group called `rancher-nodes`. The following rules are automatically added to this security group.
| Type | Protocol | Port Range | Source/Destination | Rule Type |
|-----------------|:--------:|:-----------:|------------------------|:---------:|
@@ -113,5 +112,3 @@ you can choose to let Rancher create a Security Group called `rancher-nodes`. Th
| Custom TCP Rule | TCP | 30000-32767 | 30000-32767 | Inbound |
| Custom UDP Rule | UDP | 30000-32767 | 30000-32767 | Inbound |
| All traffic | All | All | 0.0.0.0/0 | Outbound |
----
layouts/shortcodes/ports-custom-nodes.html
+32 -32
View File
@@ -18,108 +18,108 @@
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
<td style="background-color: #3497DA; color:#ffffff;">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
</tr>
<tr>
<td rowspan="5">etcd Plane Nodes</td>
<td rowspan="5" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="5" style="background-color: #3497DA">443 TCP</td>
<td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="7">Control Plane Nodes</td>
<td rowspan="7" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="7" style="background-color: #3497DA">443 TCP</td>
<td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">10250 TCP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">10250 TCP</td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="4">Worker Plane Nodes</td>
<td rowspan="4" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td rowspan="4" style="background-color: #3497DA">443 TCP</td>
<td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td rowspan="2">External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP</td>
<td></td>
<td></td>
<td></td>
@@ -127,7 +127,7 @@
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(6)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
@@ -136,19 +136,19 @@
</tr>
<tr>
<td rowspan="2">API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP<br></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
@@ -156,21 +156,21 @@
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">30000-32767 TCP/UDP<br>(nodeport)</td>
<td style="background-color: #3497DA; color:#ffffff;">30000-32767 TCP / UDP<br>(nodeport)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">80 TCP (Ingress)</td>
<td colspan="2" style="background-color: #3497DA; color:#ffffff;">80 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">443 TCP (Ingress)</td>
<td colspan="2" style="background-color: #3497DA; color:#ffffff;">443 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
layouts/shortcodes/ports-iaas-nodes.html
+34 -34
View File
@@ -14,115 +14,115 @@
<tr>
<td rowspan="2">Rancher Nodes <sup>(1)</sup></td>
<td></td>
<td colspan="3" style="background-color: #3497DA">22 TCP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">22 TCP</td>
<td></td>
<td rowspan="2" style="background-color: #3497DA">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
<td rowspan="2" style="background-color: #3497DA; color:#ffffff;">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
</tr>
<tr>
<td></td>
<td colspan="3" style="background-color: #3497DA">2376 TCP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">2376 TCP</td>
<td></td>
</tr>
<tr>
<td rowspan="5">etcd Plane Nodes</td>
<td rowspan="5" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="5" style="background-color: #3497DA">443 TCP</td>
<td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 TCP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="7">Control Plane Nodes</td>
<td rowspan="7" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="7" style="background-color: #3497DA">443 TCP</td>
<td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">10250 TCP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">10250 TCP</td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="4">Worker Plane Nodes</td>
<td rowspan="4" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
<td></td>
<td rowspan="4" style="background-color: #3497DA">443 TCP</td>
<td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td rowspan="2">External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP</td>
<td></td>
<td></td>
<td></td>
@@ -130,7 +130,7 @@
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(6)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
@@ -139,19 +139,19 @@
</tr>
<tr>
<td rowspan="2">API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP<br></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
<td></td>
</tr>
<tr>
@@ -159,21 +159,21 @@
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">30000-32767 TCP/UDP<br>(nodeport)</td>
<td style="background-color: #3497DA; color:#ffffff;">30000-32767 TCP / UDP<br>(nodeport)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">80 TCP (Ingress)</td>
<td colspan="2" style="background-color: #3497DA; color:#ffffff;">80 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">443 TCP (Ingress)</td>
<td colspan="2" style="background-color: #3497DA; color:#ffffff;">443 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
layouts/shortcodes/ports-imported-hosted.html
+8 -8
View File
@@ -12,35 +12,35 @@
<tr>
<td>Rancher Nodes <sup>(1)</sup></td>
<td></td>
<td style="background-color: #3497DA">Kubernetes API <br>Endpoint Port <sup>(2)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">Kubernetes API <br>Endpoint Port <sup>(2)</sup></td>
<td></td>
<td style="background-color: #3497DA">git.rancher.io <sup>(3)</sup>:<br>35.160.43.145/32<br>35.167.242.46/32<br>52.33.59.17/32</td>
<td style="background-color: #3497DA; color:#ffffff;">git.rancher.io <sup>(3)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
</tr>
<tr>
<td>Hosted / Imported Cluster</td>
<td style="background-color: #3497DA">443 TCP <sup>(4)(5)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(4)(5)</sup></td>
<td></td>
<td style="background-color: #3497DA">443 TCP <sup>(5)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(5)</sup></td>
<td></td>
</tr>
<tr>
<td>External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP<br>443 TCP <sup>(6)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP<br>443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td>API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(4)</sup><br>443 TCP <sup>(4)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP <sup>(4)</sup><br>443 TCP <sup>(4)</sup></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br>443 TCP</td>
<td style="background-color: #3497DA; color:#ffffff;">80 TCP<br>443 TCP</td>
<td></td>
</tr>
<tr>
<td>Workload Client</td>
<td></td>
<td style="background-color: #3497DA">Cluster / Provider Specific <sup>(7)</sup></td>
<td style="background-color: #3497DA; color:#ffffff;">Cluster / Provider Specific <sup>(7)</sup></td>
<td></td>
<td></td>
</tr>
layouts/shortcodes/ports-rancher-nodes.html
-1
View File
@@ -1,5 +1,4 @@
<table>
<caption>Port Requirements for Hosted / Imported Clusters</caption>
<thead>
<tr>
<th>Protocol</th>