From 649d22cde57b1755b6fbe5a1d380ed89191119b8 Mon Sep 17 00:00:00 2001 From: Manuel Buil Date: Wed, 18 Mar 2026 13:03:00 +0100 Subject: [PATCH 1/2] Be more specific on ports for ICMP Signed-off-by: Manuel Buil --- docs/install/requirements.md | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/docs/install/requirements.md b/docs/install/requirements.md index e708e807..a09f4d77 100644 --- a/docs/install/requirements.md +++ b/docs/install/requirements.md @@ -137,12 +137,14 @@ The VXLAN port on nodes should not be exposed to the world as it opens up your c -| Port | Protocol | Source | Destination | Description -|-------------|----------|-------------------|-------------------|------------ -| 8/0 | ICMP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks -| 4240 | TCP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks -| 8472 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with VXLAN -| 51871 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with WireGuard +| Port | Protocol | Source | Destination | Description +|-------------|-----------|-------------------|-------------------|------------ +| 8/0 * | ICMP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks +| 4240 | TCP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks +| 8472 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with VXLAN +| 51871 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with WireGuard + +\* 8/0 is not a port but the [ICMP type](https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml#icmp-parameters-types). It is required for the network utility ping From 2b885fdb2c2858b18411956b986561cd3c775413 Mon Sep 17 00:00:00 2001 From: Manuel Buil Date: Thu, 28 May 2026 12:29:44 +0200 Subject: [PATCH 2/2] Update docs/install/requirements.md Co-authored-by: Brad Davidson --- docs/install/requirements.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/install/requirements.md b/docs/install/requirements.md index a09f4d77..01855ae4 100644 --- a/docs/install/requirements.md +++ b/docs/install/requirements.md @@ -139,12 +139,12 @@ The VXLAN port on nodes should not be exposed to the world as it opens up your c | Port | Protocol | Source | Destination | Description |-------------|-----------|-------------------|-------------------|------------ -| 8/0 * | ICMP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks +| 0, 8 * | ICMP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks | 4240 | TCP | All RKE2 nodes | All RKE2 nodes | Cilium CNI health checks | 8472 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with VXLAN | 51871 | UDP | All RKE2 nodes | All RKE2 nodes | Cilium CNI with WireGuard -\* 8/0 is not a port but the [ICMP type](https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml#icmp-parameters-types). It is required for the network utility ping +\* 0, 8 is not a port but the [ICMP type](https://www.iana.org/assignments/icmp-parameters/icmp-parameters.xhtml#icmp-parameters-types). It is required for the network utility ping