public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-26 21:18:04 +00:00
Code Issues Packages Projects Releases Wiki Activity

adding new tables for ports

Browse Source
This commit is contained in:
Mark Bishop
2018-09-11 19:19:38 -07:00
parent ef0c97eb59
commit 715679d4dc
6 changed files with 516 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
layouts/shortcodes/ports-custom-nodes.html
+181
View File
@@ -0,0 +1,181 @@
<table>
<thead>
<tr>
<th>From / To</th>
<th>Rancher Nodes</th>
<th>etcd Plane Nodes</th>
<th>Control Plane Nodes</th>
<th>Worker Plane Nodes</th>
<th>External Load Balancer</th>
<th>Internet</th>
</tr>
</thead>
<tbody>
<tr>
<td >Rancher Nodes <sup>(1)</sup></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
</tr>
<tr>
<td rowspan="5">etcd Plane Nodes</td>
<td rowspan="5" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="5" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="7">Control Plane Nodes</td>
<td rowspan="7" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="7" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">10250 TCP</td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="4">Worker Plane Nodes</td>
<td rowspan="4" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td rowspan="4" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td rowspan="2">External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="2">API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td rowspan="3">Workload Clients</td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">30000-32767 TCP/UDP<br>(nodeport)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">80 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">443 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="7">Notes:<br><br>1. Nodes running standalone server or Rancher HA deployment.<br>2. Required to fetch Rancher chart library.<br>3. Only without external load balancer.<br>4. Local traffic to the node itself (not across nodes).<br>5. Load balancer / proxy that handles tragging to the Rancher UI / API.<br>6. Only if SSL is not terminated at external load balancer.</td>
</tr>
</tbody>
</table>
layouts/shortcodes/ports-iaas-nodes.html
+184
View File
@@ -0,0 +1,184 @@
<table style="border-style:solid;">
<thead>
<tr>
<th>From / To</th>
<th>Rancher Nodes</th>
<th>etcd Plane Nodes</th>
<th>Control Plane Nodes</th>
<th>Worker Plane Nodes</th>
<th>External Load Balancer</th>
<th>Internet</th>
</tr>
</thead>
<tbody>
<tr>
<td rowspan="2">Rancher Nodes <sup>(1)</sup></td>
<td></td>
<td colspan="3" style="background-color: #3497DA">22 TCP</td>
<td></td>
<td rowspan="2" style="background-color: #3497DA">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
</tr>
<tr>
<td></td>
<td colspan="3" style="background-color: #3497DA">2376 TCP</td>
<td></td>
</tr>
<tr>
<td rowspan="5">etcd Plane Nodes</td>
<td rowspan="5" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="5" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="7">Control Plane Nodes</td>
<td rowspan="7" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td style="background-color: #3497DA">2379 TCP</td>
<td></td>
<td></td>
<td rowspan="7" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">2380 TCP</td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">10250 TCP</td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="4">Worker Plane Nodes</td>
<td rowspan="4" style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td></td>
<td style="background-color: #3497DA">6443 TCP</td>
<td></td>
<td rowspan="4" style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td colspan="3" style="background-color: #3497DA">8472 UDP</td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">9099 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td style="background-color: #3497DA">10254 TCP <sup>(4)</sup></td>
<td></td>
</tr>
<tr>
<td rowspan="2">External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP</td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td rowspan="2">API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br></td>
<td></td>
</tr>
<tr>
<td style="background-color: #3497DA">443 TCP <sup>(3)</sup></td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">443 TCP</td>
<td></td>
</tr>
<tr>
<td rowspan="3">Workload Clients</td>
<td></td>
<td></td>
<td></td>
<td style="background-color: #3497DA">30000-32767 TCP/UDP<br>(nodeport)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">80 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td></td>
<td></td>
<td colspan="2" style="background-color: #3497DA">443 TCP (Ingress)</td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="7">Notes:<br><br>1. Nodes running standalone server or Rancher HA deployment.<br>2. Required to fetch Rancher chart library.<br>3. Only without external load balancer.<br>4. Local traffic to the node itself (not across nodes).<br>5. Load balancer / proxy that handles tragging to the Rancher UI / API.<br>6. Only if SSL is not terminated at external load balancer.</td>
</tr>
</tbody>
</table>
layouts/shortcodes/ports-imported-hosted.html
+51
View File
@@ -0,0 +1,51 @@
<table>
<thead>
<tr>
<th>From / To</th>
<th>Rancher Nodes</th>
<th>Hosted / Imported Cluster</th>
<th>External Load Balancer</th>
<th>Internet</th>
</tr>
</thead>
<tbody>
<tr>
<td>Rancher Nodes <sup>(1)</sup></td>
<td></td>
<td style="background-color: #3497DA">Kubernetes API <br>Endpoint Port <sup>(2)</sup></td>
<td></td>
<td style="background-color: #3497DA">git.rancher.io <sup>(3)</sup>:<br>35.160.43.145/32<br>35.167.242.46/32<br>52.33.59.17/32</td>
</tr>
<tr>
<td>Hosted / Imported Cluster</td>
<td style="background-color: #3497DA">443 TCP <sup>(4)(5)</sup></td>
<td></td>
<td style="background-color: #3497DA">443 TCP <sup>(5)</sup></td>
<td></td>
</tr>
<tr>
<td>External Load Balancer <sup>(5)</sup></td>
<td style="background-color: #3497DA">80 TCP<br>443 TCP <sup>(6)</sup></td>
<td></td>
<td></td>
<td></td>
</tr>
<tr>
<td>API / UI Clients</td>
<td style="background-color: #3497DA">80 TCP <sup>(4)</sup><br>443 TCP <sup>(4)</sup></td>
<td></td>
<td style="background-color: #3497DA">80 TCP<br>443 TCP</td>
<td></td>
</tr>
<tr>
<td>Workload Client</td>
<td></td>
<td style="background-color: #3497DA">Cluster / Provider Specific <sup>(7)</sup></td>
<td></td>
<td></td>
</tr>
<tr>
<td colspan="5">Notes:<br><br>1. Nodes running standalone server or Rancher HA deployment.<br>2. Only for hosted clusters.<br>3. Required to fetch Rancher chart library.<br>4. Only without external load balancer.<br>5. From worker nodes.<br>6. Only if SSL is not terminated at external load balancer.<br>7. Usually Ingress backed by infrastructure load balancer and/or nodeport.</td>
</tr>
</tbody>
</table>
layouts/shortcodes/ports-rancher-nodes.html
+56
View File
@@ -0,0 +1,56 @@
<table>
<caption>Port Requirements for Hosted / Imported Clusters</caption>
<thead>
<tr>
<th>Protocol</th>
<th>Port</th>
<th>Source</th>
<th>Destination</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>TCP</td>
<td>80</td>
<td>Load Balancer / Reverse Proxy</td>
<td></td>
<td>HTTP traffic to Rancher UI / API.</td>
</tr>
<tr>
<td>TCP</td>
<td>443</td>
<td>Load Balancer / Reverse Proxy<br><br>Otherwise IPs of all cluster nodes and other Rancher API / UI clients.</td>
<td></td>
<td>HTTPS traffic to Rancher UI / API.</td>
</tr>
<tr>
<td>TCP</td>
<td>443</td>
<td></td>
<td>35.160.43.145<br>35.167.242.46<br>52.33.59.17</td>
<td>Rancher catalog (git.rancher.io).</td>
</tr>
<tr>
<td>TCP</td>
<td>22</td>
<td></td>
<td>Any node created using node driver.</td>
<td>SSH provisioning of node by node driver.</td>
</tr>
<tr>
<td>TCP</td>
<td>2376</td>
<td></td>
<td>Any node created using node driver.</td>
<td>Docker daemon TLS port used by node driver.</td>
</tr>
<tr>
<td>TCP</td>
<td>Provider Dependent</td>
<td></td>
<td>Port of the Kubernetes API endpoint in hosted clusters.</td>
<td>Kubernetes API.</td>
</tr>
</tbody>
</table>