Looks like rancher's host-switch is only blocking this port