Workload Cluster Network Ports (VCN-Native Pod)

On Compute Cloud@Customer, the following table lists ports that are used by workload clusters when you use VCN-Native Pod Networking. These ports must be available to configure workload cluster networking. You might need to open more ports for other purposes.

All protocols are TCP. All port states are Stateful. Port 6443 is the port used for Kubernetes API and is also known as kubernetes_api_port in this guide.

See also the tables in Network Port and Protocol Matrix.

Ports that Must Be Available for Use by Workload Clusters for VCN-Native Pod Networking
Source IP Address	Destination IP Address	Port	Description
bastion host: `vcn_cidr`	Worker nodes subnet: `worker_cidr`	22	Outbound connections from the bastion host to the worker CIDR.
bastion host: `vcn_cidr`	Control plane subnet: `kmi_cidr`	22	Outbound connections from the bastion host to the control plane nodes.
Worker nodes subnet: `worker_cidr`	yum repository	80	Outbound connections from the worker CIDR to external applications.
Worker nodes subnet: `worker_cidr`	Control plane subnet: `kmi_cidr`	6443	Outbound connections from the worker CIDR to the Kubernetes API. This is necessary to allow nodes to join through either a public IP address on one of the nodes or the load balancer public IP address.
Worker nodes subnet: `worker_cidr`	Control plane load balancer	6443	Inbound connections from the worker CIDR to the Kubernetes API.
CIDR for clients: `kube_client_cidr`	Control plane load balancer	6443	Inbound connections from clients to the Kubernetes API server.
Worker nodes subnet: `worker_cidr`	Control plane subnet: `kmi_cidr`	6443	Private outbound connections from the worker CIDR to `kubeapi` on the control plane subnet.
`kube_client_cidr`	Worker nodes subnet: `worker_cidr`	30000-32767	Inbound traffic for applications from Kubernetes clients.
`kmi_cidr`	`worker_cidr`, `pod_cidr`	10250	Kubernetes API endpoint to worker node communication.
`kmi_cidr`	`worker_cidr`, `pod_cidr`	10256	Allow load balancer or network load balancer to communicate with `kube-proxy` on worker nodes or pod subnet.
`pod_cidr`	`kmilb_cidr`	12250	Pod to Kubernetes API endpoint communication.
`kmi_cidr`	`kmi_cidr`	2379-2381	Communication between the `etcd` server and metrics services.
`kmi_cidr`	`kmi_cidr`	10257-10260	Inbound connection for Kubernetes components.

Oracle Cloud Infrastructure Documentation

Workload Cluster Network Ports (VCN-Native Pod)