Firewall Requirements for Analytic nodes and Cloud Proxies

Products

• VCF Operations/Automation (formerly VMware Aria Suite)

Issue/Introduction

Need to know the ports needed for communication between Primary, Replica, Data nodes, and cloud proxies for firewall purposes.

Environment

VMware Aria Operations 8.x

Resolution

Review the port requirements from VMware Ports and Protocols reference:   VMware Ports and Protocols for Aria Operations

There are many ports that are required for communication between the analytics nodes.  There is an internal IPTables that manage the firewall rules.  The rules can be reviewed via the following command:  "iptables -S".  This firewall setting governs not only public facing ports such as 443, but also internal ports that are only allowed within the analytic cluster nodes, such as ports 10002 - 10010 and 20002 - 20010.

As for Cloud Proxies, the port requirement between Cloud Proxies and Aria Cluster is port 443 and 22.