Once we have a set of remote hosts (and/or a Kubernetes cluster) we need to make sure that we have appropriate firewall rules for the ioFog components that we will start deploying on those remote hosts.
The following is an exhaustive list of the ingress firewall rules required for any ioFog Edge Compute Network.
| Component | Protocol/Port | Description |
|---|---|---|
| Controller | tcp:51121 | Controller API to be accessible from Agents and iofogctl. |
| Controller | http:80 | ECN Viewer to be accessible by ECN admins or users. |
| Router | tcp:5671 | Router Messaging Port |
| Router | tcp:45671 | Router Edge Router Connection Port. |
| Router | tcp:55671 | Inter Router Connection Port. |
| *NATs | tcp:4222 | NATs Server Port |
| NATs | tcp:7422 | NATs Leaf Port |
| NATs | tcp:6222 | NATs Cluster Port |
| NATs | tcp:8883 | NATs MQTT Port |
| *NATs | http:8222 | NATs Monitoring Port |
| Agent-Controller | tcp:22 | iofogctl SSH access to install ioFog Controller and Agent on remote hosts. |