Skip to content
This repository has been archived by the owner on Jul 30, 2021. It is now read-only.

Add port requirements doc #388

Merged
merged 1 commit into from
May 16, 2017
Merged

Add port requirements doc #388

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
28 changes: 28 additions & 0 deletions Documentation/network-requirements.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
# Requirements

## Ports

The information below describes a minimum set of port allocations used by Kubernetes components.

### Master node(s) ingress

| Protocol | Port Range | Source | Purpose |
-----------|------------|-------------------------------------------|------------------------|
| TCP | 443 | Worker Nodes, API Requests, and End-Users | Kubernetes API server. |
| UDP | 8472 | Master & Worker Nodes | flannel overlay network - *vxlan backend* |

### etcd node(s) ingress

| Protocol | Port Range | Source | Purpose |
-----------|------------|-----------------------|--------------------------------------------------|
| TCP | 2379-2380 | Master & Worker Nodes | etcd server client API |

### Worker node(s) ingress

| Protocol | Port Range | Source | Purpose |
-----------|-------------|--------------------------------|------------------------------------------------------------------------|
| TCP | 4194 | Master & Worker Nodes | The port of the localhost cAdvisor endpoint |
| UDP | 8472 | Master & Worker Nodes | flannel overlay network - *vxlan backend* |
| TCP | 10250 | Master Nodes | Worker node Kubelet API for exec and logs. |
| TCP | 10255 | Master & Worker Nodes | Worker node read-only Kubelet API (Heapster). |
| TCP | 30000-32767 | External Application Consumers | Default port range for [external service][https://kubernetes.io/docs/concepts/services-networking/service] ports. Typically, these ports would need to be exposed to external load-balancers, or other external consumers of the application itself. |