File tree Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Expand file tree Collapse file tree 1 file changed +11
-0
lines changed Original file line number Diff line number Diff line change @@ -63,6 +63,17 @@ The ICMP connectivity is required for diagnosing the state of the network in cas
63
63
| ICMP | | 0.0.0.0/0 | Heartbeats |
64
64
| IP | ALL | 0.0.0.0/0 | Outside world |
65
65
66
+
67
+ | Protocol | Port | Source | Comment |
68
+ | :------------- | :----------: | :-----------: | -----------: |
69
+ | ALL | | ESTABLISHED | |
70
+ | ICMP | | 0.0.0.0/0 | Heartbeats |
71
+ | UDP | 50000--50010 | 0.0.0.0/0 | SCION inter-AS connectivity |
72
+ | UDP | 30000 - 35000 | machines in the same SCION AS | SCION intra-AS connectivity |
73
+ | TCP | 22 | 82.130.64.0/18<br > 129.132.0.0/16<br > 195.176.96.0/19<br > 192.33.87.0/24<br > 192.33.88.0/23<br > 192.33.91.0/24<br > 192.33.92.0/24<br > 192.33.93.0/24<br > 192.33.94.0/23<br > 192.33.96.0/21<br > 192.33.104.0/22<br > 192.33.108.0/23<br > 192.33.110.0/24 | Administrative SSH access for configuration management |
74
+ | TCP | 443 | 82.130.64.0/18<br > 129.132.0.0/16<br > 195.176.96.0/19<br > 192.33.87.0/24<br > 192.33.88.0/23<br > 192.33.91.0/24<br > 192.33.92.0/24<br > 192.33.93.0/24<br > 192.33.94.0/23<br > 192.33.96.0/21<br > 192.33.104.0/22<br > 192.33.108.0/23<br > 192.33.110.0/24 | Administrative ILO/MGMT access (for physical machines) |
75
+
76
+
66
77
### Recommendations
67
78
68
79
The following are not requirements, but recommendations:
You can’t perform that action at this time.
0 commit comments