Environment security groups

Depending on what you chose during environment creation, Cloudera can create security groups for your environment automatically, or you can provide your own security groups.

If you choose to use your own security groups, you must create Knox and Default security groups as described in the Security groups documentation.
If you choose Cloudera to create all security groups required for an environment, a new FreeIPA security group is created.

FreeIPA

Azure naming convention: master0-${env-name}freeipa${numeric-id}sg

Table 1. FreeIPAinbound ports
Protocol	Port Range	Source	Description
TCP	22	Your CIDR	This is an optional port for end user SSH access to cluster hosts. You should open it to your organization’s CIDR.
TCP	9943	Cloudera CIDR	This port is used by Cloudera to maintain management control of clusters and data lakes. This port is not used when Cluster Connectivity Manager is enabled.
TCP, UDP	0-65535	Your VNet’s CIDR (for example, 10.10.0.0/16) and your subnet’s CIDR (for example, 10.0.2.0/24).	This is required for internal communication within the VNet.
ICMP	N/A	Your internal VNet CIDR (for example, 10.10.0.0/16).	This is required for internal communication within the VNet.