https://rancher.com/ logo
Title
h

hallowed-student-81622

12/23/2022, 4:38 PM
Installing the k3s agent machine here, but want to keep firewalld running. Based on documentation and a hunch, would this be enough? or too much? Would all communication be on the flannel interface or should i allow these ports on eth0 interface instead?
sudo firewall-cmd --zone=trusted --add-interface=flannel.1 --permanent
sudo firewall-cmd --zone=trusted --add-masquerade --permanent
sudo firewall-cmd --zone=trusted --add-port=6443/tcp --permanent
sudo firewall-cmd --zone=trusted --add-port=10250/tcp --permanent
sudo firewall-cmd --zone=trusted --add-port=8472/udp --permanent
sudo firewall-cmd --zone=trusted --add-port=51820/udp --permanent
sudo firewall-cmd --zone=trusted --add-port=51821/udp --permanent
sudo firewall-cmd --reload
1