Bug 1270960 - [DOCS] Port map for firewalls
Summary: [DOCS] Port map for firewalls
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Documentation
Version: 3.0.0
Hardware: Unspecified
OS: Unspecified
low
low
Target Milestone: ---
: ---
Assignee: brice
QA Contact: Vikram Goyal
Vikram Goyal
URL:
Whiteboard:
: 1280411 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2015-10-12 18:34 UTC by Alex Dellapenta
Modified: 2019-08-15 05:38 UTC (History)
5 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-09-27 03:49:47 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Alex Dellapenta 2015-10-12 18:34:58 UTC
From https://github.com/openshift/openshift-docs/issues/684:

===

There should be a section in administration guide to let the users know which ports should be open between the openshift environment if there is a firewall between broker and nodes

Say : master to node
node to node
master to master 
external to master

===

See also:

https://github.com/openshift/training/issues/291

Comment 3 brice 2015-11-06 01:44:28 UTC
A ports doc is now in the OSE 3.0 docs:

https://github.com/openshift/openshift-docs/pull/1136

Comment 4 Vikram Goyal 2015-11-11 20:26:54 UTC
*** Bug 1280411 has been marked as a duplicate of this bug. ***

Comment 5 Evgheni Dereveanchin 2015-11-17 11:46:40 UTC
Can we make protocols more visible? I think it would be better to have TCP/80 UDP/4789 rather than notes at the end of the page.

Also a question stands for port 53 - is it supposed to be both TCP and UDP? When I check my master I see that both TCP/53 and UDP/53 are being listened to.

# lsof -i | grep domain
openshift    952       root   40u  IPv4    18625      0t0  TCP *:domain (LISTEN)
openshift    952       root   41u  IPv4    18627      0t0  UDP *:domain

Comment 6 Alex Dellapenta 2015-12-02 15:43:18 UTC
See comment in https://github.com/openshift/openshift-docs/pull/1136#issuecomment-161337791 for latest.

The table is published in the 3.1 docs, but I'm moving this BZ back to ASSIGNED while I work on getting it into the 3.0 branch correctly (see above GH comment for details). I'll also address Evgheni's protocol suggestion (for both 3.0 and 3.1).

Comment 7 brice 2016-05-24 22:14:26 UTC
Feedback from ccs list:

"These tables in the 'required ports' section don't specify protocol, could you please add a column containing tcp/udp"

Comment 8 Vikram Goyal 2017-09-20 05:43:36 UTC
@Brice - this is quite old and I am happy for you to close it if there is no more work to be done on this.

Comment 9 brice 2017-09-27 03:49:47 UTC
From what I can see, this is currently in the docs, and goes back to 3.1.

I'll close this. Alex, if you disagree and think it needs something else, let me know.


Note You need to log in before you can comment on or make changes to this bug.