Skip to content

98. Firewall

Jump to bottom
老夫的猫呢 edited this page May 19, 2023 · 4 revisions

firewalld

flannel

# etcd
firewall-cmd --permanent --add-port=2379-2380/tcp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

# master
firewall-cmd --permanent --add-port=8443/tcp
firewall-cmd --permanent --add-port=6443/tcp
firewall-cmd --permanent --add-port=10250/tcp
firewall-cmd --permanent --add-port=8472/udp
firewall-cmd --permanent --add-port=53/udp
firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-port=30000-32767/tcp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

# worker
firewall-cmd --permanent --add-port=10250/tcp 
firewall-cmd --permanent --add-port=8472/udp 
firewall-cmd --permanent --add-port=53/udp 
firewall-cmd --permanent --add-port=443/tcp 
firewall-cmd --permanent --add-port=30000-32767/tcp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

calico

# etcd
firewall-cmd --permanent --add-port=2379-2380/tcp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

# master
firewall-cmd --permanent --add-port=8443/tcp
firewall-cmd --permanent --add-port=6443/tcp
firewall-cmd --permanent --add-port=10250/tcp
firewall-cmd --permanent --add-port=53/udp
firewall-cmd --permanent --add-port=53/tcp
firewall-cmd --permanent --add-port=443/tcp
firewall-cmd --permanent --add-port=30000-32767/tcp
firewall-cmd --permanent --add-port=179/tcp
firewall-cmd --permanent --add-port=4789/udp 
firewall-cmd --permanent --add-port=5473/tcp
firewall-cmd --permanent --add-port=51820-51821/udp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

# worker
firewall-cmd --permanent --add-port=10250/tcp 
firewall-cmd --permanent --add-port=53/udp 
firewall-cmd --permanent --add-port=443/tcp 
firewall-cmd --permanent --add-port=30000-32767/tcp
firewall-cmd --permanent --add-port=179/tcp
firewall-cmd --permanent --add-port=4789/udp 
firewall-cmd --permanent --add-port=5473/tcp
firewall-cmd --permanent --add-port=51820-51821/udp
firewall-cmd --add-masquerade --permanent
firewall-cmd --reload

ufw

flannel

calico

Clone this wiki locally