Skip to content

Documented additional ports required for ECE containers to communicate on the same host. #4050

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Nov 25, 2025
Merged

Documented additional ports required for ECE containers to communicate on the same host. #4050

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
42f63ed
Documented additional ports required for ECE containers to communicat…
gheorghepucea Nov 24, 2025
b1fbeb1
Fixed linting issues in ece network prereq.
gheorghepucea Nov 24, 2025
0365f1e
Fixed link to ece container communication section on same page.
gheorghepucea Nov 24, 2025
627e572
Merge branch 'main' into add-details-to-ece-network-prerequisites
eedugon Nov 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,9 @@ For versions 2.4.0 and 2.4.1, IPv6 should remain enabled on any host with the Pr

* [Inbound traffic](#ece-inbound)
* [Outbound traffic](#ece-outbound)
* [Container communication on the same host](#ece-container-communication-on-same-host)
* [Hosts in multiple data centers](#ece-multiple-data-centers)


## Inbound traffic [ece-inbound]

When there are multiple hosts for each role, the inbound networking and ports can be represented by the following diagram:
Expand Down Expand Up @@ -68,6 +68,21 @@ Outbound traffic must also permit connections to the [snapshot repositories](../
::::


## Container communication on the same host [ece-container-communication-on-same-host]

The following ports need to be open for containers communicating with the host or with each other on the same host:

| Port(s) | Purpose | Host role |
| --- | --- | --- |
| 53 | DNS resolver | All roles |
| 2180 | ZooKeeper admin port | All roles |
| 2375 | Docker admin port | All roles |
| 2191-2199 | Debug ports | Director |
| 5000-5010 | Java Virtual Machine (JVM)/debug ports | All roles |
| 8080-8084 | Health/monitoring ports | All roles |
| 9000, 9043 | Internal proxy use | Proxy |
| 9244 | Internal proxy port | All roles |

Copy link
Contributor

@eedugon eedugon Nov 24, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

What about 22191-22199? Aren't they the ports used for the stunnels to zk servers? I think we have them mentioned in some KBs for connectivity verifications (similar to 2191-2199).

Copy link
Contributor Author

@gheorghepucea gheorghepucea Nov 24, 2025 •
edited
Loading

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good question @eedugon , they are already mentioned in the section "Inbound traffic from other ECE hosts", so I believe mentioning them twice would just confuse people.

Copy link
Contributor

@eedugon eedugon Nov 24, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry I hadn't seen it! Thanks!


## Hosts in multiple data centers [ece-multiple-data-centers]

Expand Down
Loading