Inbound ports for NetApp Console local deployment
Suggest changes
PDFs
The NetApp Console local deployment OVA manages its own internal firewall. If your environment enforces an external firewall policy on the VM, ensure the following inbound ports are reachable from your management hosts.
| Port | Protocol | Purpose |
|---|---|---|
22 |
TCP |
SSH for remote maintenance and diagnostic shell access |
123 |
UDP |
NTP for time synchronization |
2379 |
TCP |
etcd client API for RKE2 control-plane etcd client traffic |
2380 |
TCP |
etcd peer port for etcd member-to-member replication |
6443 |
TCP |
Kubernetes API server for kubectl and RKE2 API access |
8472 |
UDP |
Canal/Flannel VXLAN overlay for pod-to-pod traffic between RKE2 nodes |
9091 |
TCP |
Calico Felix metrics endpoint for CNI health and metrics |
9100 |
TCP |
Prometheus node_exporter for host metrics scraping |
9345 |
TCP |
RKE2 supervisor and server registration endpoint |
10250 |
TCP |
Kubelet API for metrics-server and kube-apiserver to kubelet |