diff --git a/deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md b/deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md index 2163d56c48..394f5a015e 100644 --- a/deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md +++ b/deploy-manage/deploy/cloud-enterprise/ece-networking-prereq.md @@ -23,6 +23,8 @@ When there are multiple hosts for each role, the inbound networking and ports ca ![ECE networking and ports](/deploy-manage/images/cloud-enterprise-ece-networking-ports.png "") +**Inbound traffic from any source** + | **Number** | **Host role** | **Inbound ports** | *Purpose* | | --- | --- | --- | --- | | | All | 22 | Installation and troubleshooting SSH access only (TCP)
| @@ -32,11 +34,12 @@ When there are multiple hosts for each role, the inbound networking and ports ca | 3 | Proxy | 9400, 9443 | Elasticsearch Cross Cluster Search and Cross Cluster Replication with TLS authentication (9400) or API key authentication (9443), also required by load balancers. Can be blocked if [CCR/CCS](../../remote-clusters/ece-enable-ccs.md) is not used.
| | 7 | Coordinator | 12400/12443 | Cloud UI console to API (HTTP/HTTPS)
| -In addition to the following list, you should open 12898-12908 and 13898-13908 on the director host for ZooKeeper leader and election activity. +**Inbound traffic from other ECE hosts** | **Number** | **Host role** | **Inbound ports** | *Purpose* | | --- | --- | --- | --- | | 1 | Director | 2112 | ZooKeeper ensemble discovery/joining (TCP)
| +| 1 | Director | 12898-12908, 13898-13908 | ZooKeeper leader and election activity | | 4 | Director | 12191-12201 | Client forwarder to ZooKeeper, one port per director (TLS tunnels)
| | 5 | Allocator | 19000-19999 | Elasticsearch node to node and Proxy to Elasticsearch for CCR/CCS (Node Transport 6.x+/TLS 6.x+)
| | 7 | Coordinator | 22191-22195 | Connections to initial coordinator from allocators and proxies, one port per coordinator, up to five (TCP)
|