{"action":"created","comment":{"url":"https://api.github.com/repos/projectcalico/calico/pulls/comments/189739609","pull_request_review_id":121977344,"id":189739609,"diff_hunk":"@@ -31,19 +31,24 @@ to connect to, we provide instructions in the [installation documentation](./ins\n \n ## Network requirements\n \n-{{site.prodname}} requires the network to allow the following types of traffic.\n-\n-| Traffic | Protocol | Port |\n-| ------- | -------- | ---- |\n-| BGP     | TCP      | 179  |\n-| IPIP\\*  | 4        | n/a  |\n-\n-\\* {% if include.orch == \"OpenStack\" %} If your compute hosts connect directly\n-   and don't use IPIP, you don't need to allow IPIP traffic. {% else %} Our\n-   manifests enable IPIP by default.  If you disable IPIP, you won't need to\n-   allow IPIP traffic. {% endif %} Refer to [Configuring\n-   IP-in-IP](../../usage/configuration/ip-in-ip) for more information.\n-\n-> **Tip**: On GCE, you can allow this traffic using firewall rules. In AWS, use\n-> EC2 security group rules.\n-{: .alert .alert-success}\n+Ensure that your hosts and firewalls allow the following traffic.\n+\n+| Configuration                                                                         | Host                | Connection type | Port/protocol                                                 |\n+|---------------------------------------------------------------------------------------|---------------------|-----------------|---------------------------------------------------------------|\n+| {{site.prodname}} networking                                                          | All                 | Bidirectional   | TCP 179                                                       |\n+| {{site.prodname}} networking in IP-in-IP mode (default mode)                          | All                 | Bidirectional   | IP-in-IP, often represented by its protocol number `4`        |\n+{%- if include.orch == \"Kubernetes\" %}\n+| flannel networking (VXLAN)                                                            | All                 | Bidirectional   | UDP 4789                                                      |\n+| etcd datastore                                                                        | etcd hosts          | Incoming        | Often TCP 2379 but varies per etcd configuration              |\n+| {{site.prodname}} networking, Kubernetes API datastore, cluster of more than 50 nodes | Typha agent hosts   | Incoming        | TCP 5473 (default)                                            |\n+{%- else %}\n+| All                                                                                   | etcd hosts          | Incoming        | Varies per etcd configuration                                 |\n+{%- endif %}\n+{%- if include.orch == \"Kubernetes\" or include.orch == \"OpenShift\" %}\n+| All                                                                                   | kube-apiserver host | Incoming        | Often TCP 443, but check the `port` value returned by `kubectl get svc kubernetes -o yaml` |","path":"_includes/master/reqs-sys.md","position":34,"original_position":34,"commit_id":"dae0f96b0734d95c51bfef2b7a3f4a358535895d","original_commit_id":"dae0f96b0734d95c51bfef2b7a3f4a358535895d","user":{"login":"emanic","id":9090088,"avatar_url":"https://avatars1.githubusercontent.com/u/9090088?v=4","gravatar_id":"","url":"https://api.github.com/users/emanic","html_url":"https://github.com/emanic","followers_url":"https://api.github.com/users/emanic/followers","following_url":"https://api.github.com/users/emanic/following{/other_user}","gists_url":"https://api.github.com/users/emanic/gists{/gist_id}","starred_url":"https://api.github.com/users/emanic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanic/subscriptions","organizations_url":"https://api.github.com/users/emanic/orgs","repos_url":"https://api.github.com/users/emanic/repos","events_url":"https://api.github.com/users/emanic/events{/privacy}","received_events_url":"https://api.github.com/users/emanic/received_events","type":"User","site_admin":false},"body":"Yes, I have been looking at this page quite a bit. That's just the thing, I think there are probably three different common possibilities: 443, 6443, and 8443 (openshift). I can mention all three , it will help them some, but not a lot. Also, I think rather than making them try to remember what might have been passed into the api server, it will be easier to give them this command which helps them in real time.","created_at":"2018-05-21T23:18:08Z","updated_at":"2018-05-21T23:18:08Z","html_url":"https://github.com/projectcalico/calico/pull/1975#discussion_r189739609","pull_request_url":"https://api.github.com/repos/projectcalico/calico/pulls/1975","author_association":"CONTRIBUTOR","_links":{"self":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/comments/189739609"},"html":{"href":"https://github.com/projectcalico/calico/pull/1975#discussion_r189739609"},"pull_request":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/1975"}},"in_reply_to_id":189444286},"pull_request":{"url":"https://api.github.com/repos/projectcalico/calico/pulls/1975","id":188258374,"html_url":"https://github.com/projectcalico/calico/pull/1975","diff_url":"https://github.com/projectcalico/calico/pull/1975.diff","patch_url":"https://github.com/projectcalico/calico/pull/1975.patch","issue_url":"https://api.github.com/repos/projectcalico/calico/issues/1975","number":1975,"state":"open","locked":false,"title":"Improves network/port requirements","user":{"login":"emanic","id":9090088,"avatar_url":"https://avatars1.githubusercontent.com/u/9090088?v=4","gravatar_id":"","url":"https://api.github.com/users/emanic","html_url":"https://github.com/emanic","followers_url":"https://api.github.com/users/emanic/followers","following_url":"https://api.github.com/users/emanic/following{/other_user}","gists_url":"https://api.github.com/users/emanic/gists{/gist_id}","starred_url":"https://api.github.com/users/emanic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanic/subscriptions","organizations_url":"https://api.github.com/users/emanic/orgs","repos_url":"https://api.github.com/users/emanic/repos","events_url":"https://api.github.com/users/emanic/events{/privacy}","received_events_url":"https://api.github.com/users/emanic/received_events","type":"User","site_admin":false},"body":"## Description\r\n\r\n- Increases accuracy and completeness of existing network requirements especially in relation to ports\r\n\r\n\r\n\r\n## Todos\r\n\r\n- [ ] Tests\r\n- [ ] Documentation\r\n- [ ] Release note\r\n\r\n## Release Note\r\n\r\n<!-- Writing a release note:\r\n- By default, no release note action is required.\r\n- If you're unsure whether or not your PR needs a note, ask your reviewer for guidance.\r\n- If this PR requires a release note, update the block below to include a concise note describing\r\n  the change and any important impacts this PR may have.\r\n-->\r\n\r\n```release-note\r\nNone required\r\n```\r\n","created_at":"2018-05-15T21:17:07Z","updated_at":"2018-05-21T23:18:08Z","closed_at":null,"merged_at":null,"merge_commit_sha":"6b70a3afeaf7dbdd37552d252c7fa507928463af","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/projectcalico/calico/pulls/1975/commits","review_comments_url":"https://api.github.com/repos/projectcalico/calico/pulls/1975/comments","review_comment_url":"https://api.github.com/repos/projectcalico/calico/pulls/comments{/number}","comments_url":"https://api.github.com/repos/projectcalico/calico/issues/1975/comments","statuses_url":"https://api.github.com/repos/projectcalico/calico/statuses/dae0f96b0734d95c51bfef2b7a3f4a358535895d","head":{"label":"emanic:ports","ref":"ports","sha":"dae0f96b0734d95c51bfef2b7a3f4a358535895d","user":{"login":"emanic","id":9090088,"avatar_url":"https://avatars1.githubusercontent.com/u/9090088?v=4","gravatar_id":"","url":"https://api.github.com/users/emanic","html_url":"https://github.com/emanic","followers_url":"https://api.github.com/users/emanic/followers","following_url":"https://api.github.com/users/emanic/following{/other_user}","gists_url":"https://api.github.com/users/emanic/gists{/gist_id}","starred_url":"https://api.github.com/users/emanic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanic/subscriptions","organizations_url":"https://api.github.com/users/emanic/orgs","repos_url":"https://api.github.com/users/emanic/repos","events_url":"https://api.github.com/users/emanic/events{/privacy}","received_events_url":"https://api.github.com/users/emanic/received_events","type":"User","site_admin":false},"repo":{"id":101001111,"name":"calico","full_name":"emanic/calico","owner":{"login":"emanic","id":9090088,"avatar_url":"https://avatars1.githubusercontent.com/u/9090088?v=4","gravatar_id":"","url":"https://api.github.com/users/emanic","html_url":"https://github.com/emanic","followers_url":"https://api.github.com/users/emanic/followers","following_url":"https://api.github.com/users/emanic/following{/other_user}","gists_url":"https://api.github.com/users/emanic/gists{/gist_id}","starred_url":"https://api.github.com/users/emanic/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/emanic/subscriptions","organizations_url":"https://api.github.com/users/emanic/orgs","repos_url":"https://api.github.com/users/emanic/repos","events_url":"https://api.github.com/users/emanic/events{/privacy}","received_events_url":"https://api.github.com/users/emanic/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/emanic/calico","description":"Documentation and release artifacts for Calico","fork":true,"url":"https://api.github.com/repos/emanic/calico","forks_url":"https://api.github.com/repos/emanic/calico/forks","keys_url":"https://api.github.com/repos/emanic/calico/keys{/key_id}","collaborators_url":"https://api.github.com/repos/emanic/calico/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/emanic/calico/teams","hooks_url":"https://api.github.com/repos/emanic/calico/hooks","issue_events_url":"https://api.github.com/repos/emanic/calico/issues/events{/number}","events_url":"https://api.github.com/repos/emanic/calico/events","assignees_url":"https://api.github.com/repos/emanic/calico/assignees{/user}","branches_url":"https://api.github.com/repos/emanic/calico/branches{/branch}","tags_url":"https://api.github.com/repos/emanic/calico/tags","blobs_url":"https://api.github.com/repos/emanic/calico/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/emanic/calico/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/emanic/calico/git/refs{/sha}","trees_url":"https://api.github.com/repos/emanic/calico/git/trees{/sha}","statuses_url":"https://api.github.com/repos/emanic/calico/statuses/{sha}","languages_url":"https://api.github.com/repos/emanic/calico/languages","stargazers_url":"https://api.github.com/repos/emanic/calico/stargazers","contributors_url":"https://api.github.com/repos/emanic/calico/contributors","subscribers_url":"https://api.github.com/repos/emanic/calico/subscribers","subscription_url":"https://api.github.com/repos/emanic/calico/subscription","commits_url":"https://api.github.com/repos/emanic/calico/commits{/sha}","git_commits_url":"https://api.github.com/repos/emanic/calico/git/commits{/sha}","comments_url":"https://api.github.com/repos/emanic/calico/comments{/number}","issue_comment_url":"https://api.github.com/repos/emanic/calico/issues/comments{/number}","contents_url":"https://api.github.com/repos/emanic/calico/contents/{+path}","compare_url":"https://api.github.com/repos/emanic/calico/compare/{base}...{head}","merges_url":"https://api.github.com/repos/emanic/calico/merges","archive_url":"https://api.github.com/repos/emanic/calico/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/emanic/calico/downloads","issues_url":"https://api.github.com/repos/emanic/calico/issues{/number}","pulls_url":"https://api.github.com/repos/emanic/calico/pulls{/number}","milestones_url":"https://api.github.com/repos/emanic/calico/milestones{/number}","notifications_url":"https://api.github.com/repos/emanic/calico/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/emanic/calico/labels{/name}","releases_url":"https://api.github.com/repos/emanic/calico/releases{/id}","deployments_url":"https://api.github.com/repos/emanic/calico/deployments","created_at":"2017-08-21T23:38:55Z","updated_at":"2018-05-01T19:00:54Z","pushed_at":"2018-05-21T23:13:17Z","git_url":"git://github.com/emanic/calico.git","ssh_url":"git@github.com:emanic/calico.git","clone_url":"https://github.com/emanic/calico.git","svn_url":"https://github.com/emanic/calico","homepage":"http://docs.projectcalico.org","size":22001,"stargazers_count":0,"watchers_count":0,"language":"Ruby","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"projectcalico:master","ref":"master","sha":"0275a9a30cade06adca66962b5570fdee9e15c1b","user":{"login":"projectcalico","id":12304728,"avatar_url":"https://avatars3.githubusercontent.com/u/12304728?v=4","gravatar_id":"","url":"https://api.github.com/users/projectcalico","html_url":"https://github.com/projectcalico","followers_url":"https://api.github.com/users/projectcalico/followers","following_url":"https://api.github.com/users/projectcalico/following{/other_user}","gists_url":"https://api.github.com/users/projectcalico/gists{/gist_id}","starred_url":"https://api.github.com/users/projectcalico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/projectcalico/subscriptions","organizations_url":"https://api.github.com/users/projectcalico/orgs","repos_url":"https://api.github.com/users/projectcalico/repos","events_url":"https://api.github.com/users/projectcalico/events{/privacy}","received_events_url":"https://api.github.com/users/projectcalico/received_events","type":"Organization","site_admin":false},"repo":{"id":63882194,"name":"calico","full_name":"projectcalico/calico","owner":{"login":"projectcalico","id":12304728,"avatar_url":"https://avatars3.githubusercontent.com/u/12304728?v=4","gravatar_id":"","url":"https://api.github.com/users/projectcalico","html_url":"https://github.com/projectcalico","followers_url":"https://api.github.com/users/projectcalico/followers","following_url":"https://api.github.com/users/projectcalico/following{/other_user}","gists_url":"https://api.github.com/users/projectcalico/gists{/gist_id}","starred_url":"https://api.github.com/users/projectcalico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/projectcalico/subscriptions","organizations_url":"https://api.github.com/users/projectcalico/orgs","repos_url":"https://api.github.com/users/projectcalico/repos","events_url":"https://api.github.com/users/projectcalico/events{/privacy}","received_events_url":"https://api.github.com/users/projectcalico/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/projectcalico/calico","description":"Cloud native application connectivity and network policy","fork":false,"url":"https://api.github.com/repos/projectcalico/calico","forks_url":"https://api.github.com/repos/projectcalico/calico/forks","keys_url":"https://api.github.com/repos/projectcalico/calico/keys{/key_id}","collaborators_url":"https://api.github.com/repos/projectcalico/calico/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/projectcalico/calico/teams","hooks_url":"https://api.github.com/repos/projectcalico/calico/hooks","issue_events_url":"https://api.github.com/repos/projectcalico/calico/issues/events{/number}","events_url":"https://api.github.com/repos/projectcalico/calico/events","assignees_url":"https://api.github.com/repos/projectcalico/calico/assignees{/user}","branches_url":"https://api.github.com/repos/projectcalico/calico/branches{/branch}","tags_url":"https://api.github.com/repos/projectcalico/calico/tags","blobs_url":"https://api.github.com/repos/projectcalico/calico/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/projectcalico/calico/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/projectcalico/calico/git/refs{/sha}","trees_url":"https://api.github.com/repos/projectcalico/calico/git/trees{/sha}","statuses_url":"https://api.github.com/repos/projectcalico/calico/statuses/{sha}","languages_url":"https://api.github.com/repos/projectcalico/calico/languages","stargazers_url":"https://api.github.com/repos/projectcalico/calico/stargazers","contributors_url":"https://api.github.com/repos/projectcalico/calico/contributors","subscribers_url":"https://api.github.com/repos/projectcalico/calico/subscribers","subscription_url":"https://api.github.com/repos/projectcalico/calico/subscription","commits_url":"https://api.github.com/repos/projectcalico/calico/commits{/sha}","git_commits_url":"https://api.github.com/repos/projectcalico/calico/git/commits{/sha}","comments_url":"https://api.github.com/repos/projectcalico/calico/comments{/number}","issue_comment_url":"https://api.github.com/repos/projectcalico/calico/issues/comments{/number}","contents_url":"https://api.github.com/repos/projectcalico/calico/contents/{+path}","compare_url":"https://api.github.com/repos/projectcalico/calico/compare/{base}...{head}","merges_url":"https://api.github.com/repos/projectcalico/calico/merges","archive_url":"https://api.github.com/repos/projectcalico/calico/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/projectcalico/calico/downloads","issues_url":"https://api.github.com/repos/projectcalico/calico/issues{/number}","pulls_url":"https://api.github.com/repos/projectcalico/calico/pulls{/number}","milestones_url":"https://api.github.com/repos/projectcalico/calico/milestones{/number}","notifications_url":"https://api.github.com/repos/projectcalico/calico/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/projectcalico/calico/labels{/name}","releases_url":"https://api.github.com/repos/projectcalico/calico/releases{/id}","deployments_url":"https://api.github.com/repos/projectcalico/calico/deployments","created_at":"2016-07-21T15:45:54Z","updated_at":"2018-05-21T17:46:02Z","pushed_at":"2018-05-21T23:13:19Z","git_url":"git://github.com/projectcalico/calico.git","ssh_url":"git@github.com:projectcalico/calico.git","clone_url":"https://github.com/projectcalico/calico.git","svn_url":"https://github.com/projectcalico/calico","homepage":"http://docs.projectcalico.org","size":21978,"stargazers_count":494,"watchers_count":494,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":true,"forks_count":210,"mirror_url":null,"archived":false,"open_issues_count":178,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0"},"forks":210,"open_issues":178,"watchers":494,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/1975"},"html":{"href":"https://github.com/projectcalico/calico/pull/1975"},"issue":{"href":"https://api.github.com/repos/projectcalico/calico/issues/1975"},"comments":{"href":"https://api.github.com/repos/projectcalico/calico/issues/1975/comments"},"review_comments":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/1975/comments"},"review_comment":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/projectcalico/calico/pulls/1975/commits"},"statuses":{"href":"https://api.github.com/repos/projectcalico/calico/statuses/dae0f96b0734d95c51bfef2b7a3f4a358535895d"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"emanic"}}