rancher-docs/layouts/shortcodes/ports-custom-nodes.html

<table>
    <thead>
        <tr>
          <th>From / To</th>
          <th>Rancher Nodes</th>
          <th>etcd Plane Nodes</th>
          <th>Control Plane Nodes</th>
          <th>Worker Plane Nodes</th>
          <th>External Load Balancer</th>
          <th>Internet</th>
        </tr>
    </thead>
    <tbody>
        <tr>
          <td >Rancher Nodes <sup>(1)</sup></td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">git.rancher.io <sup>(2)</sup>:<br>35.160.43.145:32<br>35.167.242.46:32<br>52.33.59.17:32</td>
        </tr>
        <tr>
          <td rowspan="5">etcd Plane Nodes</td>
          <td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
          <td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
          <td></td>
          <td></td>
          <td rowspan="5" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
          <td></td>
        </tr>
        <tr>
          <td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
          <td></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
          <td></td>
        </tr>
        <tr>
          <td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
          <td></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td rowspan="7">Control Plane Nodes</td>
          <td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
          <td style="background-color: #3497DA; color:#ffffff;">2379 TCP</td>
          <td></td>
          <td></td>
          <td rowspan="7" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
          <td></td>
        </tr>
        <tr>
          <td style="background-color: #3497DA; color:#ffffff;">2380 TCP</td>
          <td></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
          <td></td>
        </tr>
        <tr>
          <td colspan="3" style="background-color: #3497DA; color:#ffffff;">10250 TCP</td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td rowspan="4">Worker Plane Nodes</td>
          <td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">6443 TCP</td>
          <td></td>
          <td rowspan="4" style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
          <td></td>
        </tr>
        <tr>
          <td colspan="3" style="background-color: #3497DA; color:#ffffff;">8472 UDP</td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">9099 TCP <sup>(4)</sup></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">10254 TCP <sup>(4)</sup></td>
          <td></td>
        </tr>
        <tr>
          <td rowspan="2">External Load Balancer <sup>(5)</sup></td>
          <td style="background-color: #3497DA; color:#ffffff;">80 TCP</td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(6)</sup></td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td rowspan="2">API / UI Clients</td>
          <td style="background-color: #3497DA; color:#ffffff;">80 TCP <sup>(3)</sup></td>
          <td></td>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">80 TCP<br></td>
          <td></td>
        </tr>
        <tr>
          <td style="background-color: #3497DA; color:#ffffff;">443 TCP <sup>(3)</sup></td>
          <td></td>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">443 TCP</td>
          <td></td>
        </tr>
        <tr>
          <td rowspan="3">Workload Clients</td>
          <td></td>
          <td></td>
          <td></td>
          <td style="background-color: #3497DA; color:#ffffff;">30000-32767 TCP / UDP<br>(nodeport)</td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td></td>
          <td colspan="2" style="background-color: #3497DA; color:#ffffff;">80 TCP (Ingress)</td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td></td>
          <td></td>
          <td colspan="2" style="background-color: #3497DA; color:#ffffff;">443 TCP (Ingress)</td>
          <td></td>
          <td></td>
        </tr>
        <tr>
          <td colspan="7">Notes:<br><br>1. Nodes running standalone server or Rancher HA deployment.<br>2. Required to fetch Rancher chart library.<br>3. Only without external load balancer.<br>4. Local traffic to the node itself (not across nodes).<br>5. Load balancer / proxy that handles tragging to the Rancher UI / API.<br>6. Only if SSL is not terminated at external load balancer.</td>
        </tr>
    </tbody>
</table>