cluster-docs

git clone git://archive.git.mtrnord.blog/MTRNord/cluster-docs.git
Log | Files | Refs

firewall.adoc (523B)


      1 = Firewall
      2 
      3 The firewall is managed by kops. However this represents the current setup.
      4 
      5 This is done using Hetzner Hardware Firewall.
      6 This means it defaults to deny any inbound and allow any outgoing.
      7 
      8 == Control Plane
      9 
     10 [cols="2,2,2,2"]
     11 |===
     12 | Direction | IPs | Protocol | Port Range
     13 | Inbound   | Any | TCP      | 22
     14 |===
     15 
     16 == Nodes
     17 
     18 [cols="2,2,2,2"]
     19 |===
     20 | Direction | IPs | Protocol | Port Range
     21 | Inbound   | Any | TCP      | 22
     22 | Inbound   | Any | TCP      | 30000-32767
     23 | Inbound   | Any | UDP      | 30000-32767
     24 |===