Firewall Ports and Protocols Requirements for vSphere without NSX-T

Page last updated:

This topic describes the firewall ports and protocols requirements for using VMware Enterprise PKS on vSphere.

Firewalls and security policies are used to filter traffic and limit access in environments with strict inter-network access control policies.

Apps frequently require the ability to pass internal communication between system components on different networks and require one or more conduits through the environment’s firewalls. Firewall rules are also required to enable interfacing with external systems such as with enterprise apps or apps and data on the public Internet.

For Enterprise PKS, VMware recommends that you disable security policies that filter traffic between the networks supporting the system. With Enterprise PKS you should enable access to apps through standard Kubernetes load-balancers and ingress controller types. This enables you to designate specific ports and protocols as a firewall conduit.

For information on ports and protocol requirements for vSphere with NSX-T, see Firewall Ports and Protocols Requirements for vSphere with NSX-T

If you are unable to implement your security policy using the methods described above, refer to the following table, which identifies the flows between system components in a typical Enterprise PKS deployment.

Note: To control which groups access deploying and scaling your organization’s Enterprise PKS-deployed Kubernetes clusters, configure your firewall settings as described on the Operator –> PKS API server lines below.

Enterprise PKS Ports and Protocols

The following tables list ports and protocols required for network communications between Enterprise PKS v1.5.0 and later, and vSphere 6.7 and later.

Enterprise PKS Users Ports and Protocols

The following table lists ports and protocols used for network communication between Enterprise PKS user interface components.

Enterprise PKS Core Ports and Protocols

The following table lists ports and protocols used for network communication between core Enterprise PKS components.

VMware Ports and Protocols

The following tables list ports and protocols required for network communication between VMware components.

VMware Virtual Infrastructure Ports and Protocols

The following table lists ports and protocols used for network communication between VMware virtual infrastructure components.

VMware Optional Integration Ports and Protocols

The following table lists ports and protocols used for network communication between optional VMware integrations.