diff --git a/layouts/shortcodes/requirements_ports.html b/layouts/shortcodes/requirements_ports.html index 9a17b5b9765..bf64008bd7f 100644 --- a/layouts/shortcodes/requirements_ports.html +++ b/layouts/shortcodes/requirements_ports.html @@ -1,52 +1,254 @@
Port Requirements
-

Open the following ports on your Linux hosts.

+

rancher nodes:
Nodes running the rancher/rancher container

+
rancher nodes - Inbound rules
- - + + + - - - - - - + - + + - + - - - - - - - - - - - - - - - - - - - - - - - - - - + +
ProtocolPort rangePurposePortSourceDescription
tcp22ssh server
tcpTCP 80Rancher Server/ingress
  • Load balancer/proxy that does external SSL termination
Rancher UI/API when external SSL termination is used
tcpTCP 443Rancher Server/ingress
tcp6443kubernetes api server
tcp2379-2380etcd server client api
tcp10250-10256kubernetes components
tcp30000-32767nodeport services
udp8472canal
  • etcd nodes
  • controlplane nodes
  • worker nodes
  • Hosted/Imported Kubernetes
  • any that needs to be able to use UI/API
rancher agent, Rancher UI/API, kubectl
-
+
rancher nodes - Outbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortDestinationDescription
TCP22
  • Any node IP from a node created using Node Driver
SSH provisioning of nodes using Node Driver
TCP443
  • 35.160.43.145/32
  • 35.167.242.46/32
  • 52.33.59.17/32
git.rancher.io (catalogs)
TCP6443
  • Hosted/Imported Kubernetes API
Kubernetes apiserver
+

etcd nodes:
Nodes with the role etcd

+
etcd nodes - Inbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortSourceDescription
TCP2379
  • etcd nodes
  • controlplane nodes
etcd client requests
TCP2380
  • etcd nodes
  • controlplane nodes
etcd peer communication
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
TCP10250
  • controlplane nodes
kubelet
+
etcd nodes - Outbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortDestinationDescription
TCP443
  • rancher nodes
rancher agent
TCP2379
  • etcd nodes
etcd client requests
TCP2380
  • etcd nodes
etcd peer communication
TCP6443
  • controlplane nodes
Kubernetes apiserver
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
+

controlplane nodes:
Nodes with the role controlplane

+
controlplane nodes - Inbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortSourceDescription
TCP6443
  • etcd nodes
  • controlplane nodes
  • worker nodes
Kubernetes apiserver
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
TCP10250
  • controlplane nodes
kubelet
TCP/UDP30000-32767
  • Any that consumes NodePort services
NodePort port range
+
controlplane nodes - Outbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortDestinationDescription
TCP443
  • rancher nodes
rancher agent
TCP2379
  • etcd nodes
etcd client requests
TCP2380
  • etcd nodes
etcd peer communication
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
TCP10250
  • etcd nodes
  • controlplane nodes
  • worker nodes
kubelet
+

worker nodes:
Nodes with the role worker

+
worker nodes - Inbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortSourceDescription
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
TCP10250
  • controlplane nodes
kubelet
TCP/UDP30000-32767
  • Any that consumes NodePort services
NodePort port range
+
worker nodes - Outbound rules
+ + + + + + + + + + + + + + + + + + + + + + + + + +
ProtocolPortDestinationDescription
TCP443
  • rancher nodes
rancher agent
TCP6443
  • controlplane nodes
Kubernetes apiserver
UDP8472
  • etcd nodes
  • controlplane nodes
  • worker nodes
Canal/Flannel VXLAN overlay networking
+