Cluster security groups
This section lists ports used by Cloudbreak-manged clusters.
The following tables lists the default and recommended cluster security group settings:
By default, when creating a cluster, a new network, subnet, and security groups are created automatically. The default experience of creating network resources such as network, subnet and security group automatically is provided for convenience. We strongly recommend that you review these options and for production cluster deployments leverage your existing network resources that you have defined and validated to meet your enterprise requirements.
Depending on the cluster components that you are planning to use, you may need to open additional ports required by these components.
|*||All cluster hosts||TCP||22||
In addition to the ports described above, Cloudbreak uses certain ports for internal communication within the subnet. By default, Cloudbreak opens ports 0-65535 to the subnet's internal CIDR (such as 10.0.0.0/16). Use the following table to limit this CIDR:
|Salt-bootstrap||Gateway instance (Ambari server instance)||TCP||7070||Salt-bootstrap service launches and configures Saltstack.|
|Salt-master||All hosts in the cluster||TCP||4505, 4506||Salt-minions connect to the Salt-master(s).|
|Consul server||All hosts in the cluster||TCP, UDP||8300, 8301||Consul agents connect to the Consul server.|
|Consul agent (all hosts in the cluster)||All hosts in the cluster||TCP, UDP||8300, 8301||Consul agents connect to other Consul agents (Gossip protocol).|
|Prometheus node exporter||Gateway instance (Ambari server instance)||TCP||9100||Prometheus server scrapes metrics from the node exporters.|
|Ambari server||All hosts in the cluster||Refer to Default network port numbers for Ambari in Ambari documentation.||Ambari agents connect to the Ambari server.|
When creating data lakes and their attached clusters, you must also open the following internal port:
|Data lake cluster||Clusters attached to the data lake||TCP||6080||Used for communication between the data lake and attached clusters.|