Rancher nodes:
Nodes running the rancher/rancher container
Rancher nodes - Inbound rules
| Protocol |
Port |
Source |
Description |
| TCP |
80 |
- Load balancer/proxy that does external SSL termination
|
Rancher UI/API when external SSL termination is used |
| TCP |
443 |
- etcd nodes
- controlplane nodes
- worker nodes
- Hosted/Imported Kubernetes
- any that needs to be able to use UI/API
|
Rancher agent, Rancher UI/API, kubectl |
Rancher nodes - Outbound rules
| Protocol |
Port |
Destination |
Description |
| TCP |
22 |
- Any node IP from a node created using Node Driver
|
SSH provisioning of nodes using Node Driver |
| TCP |
443 |
- 35.160.43.145/32
- 35.167.242.46/32
- 52.33.59.17/32
|
git.rancher.io (catalogs) |
| TCP |
6443 |
- Hosted/Imported Kubernetes API
|
Kubernetes apiserver |