From 7fc7172cac9c16b6783d6bd9e48a0e2a8c877491 Mon Sep 17 00:00:00 2001 From: Dave Cadwallader Date: Thu, 12 Sep 2019 09:56:13 -0600 Subject: [PATCH] clarify udp port rule --- content/k3s/latest/en/configuration/_index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/k3s/latest/en/configuration/_index.md b/content/k3s/latest/en/configuration/_index.md index ad1a462c1c8..bc3d785cf0b 100644 --- a/content/k3s/latest/en/configuration/_index.md +++ b/content/k3s/latest/en/configuration/_index.md @@ -65,7 +65,7 @@ Open Ports / Network Security --------------------------- The server needs port 6443 to be accessible by the nodes. The nodes need to be able to reach -other nodes over UDP port 8472. This is used for flannel VXLAN. If you don't use flannel +other nodes over UDP port 8472. The nodes also need to be able to reach the server on UDP port 8472. This is used for flannel VXLAN. If you don't use flannel and provide your own custom CNI, then 8472 is not needed by k3s. The node should not listen on any other port. k3s uses reverse tunneling such that the nodes make outbound connections to the server and all kubelet traffic runs through that tunnel.