I am trying to setup Rancher in AWS as below.
Rancher Master Server Security Group Rules:
Inbound 8080 (0.0.0.0/0) - For Agent communication
Outbound - 80, 443
Rancher Hosts Security Group Rules:
Inbound - 22 ( ssh login from a particular host)
Outbound - 80, 443 and 8080
I am adding the hosts as ‘Custom Hosts’ i.e. installing the Rancher Agent on the host machine manually. The hosts has been installed with Docker already. The agent is getting installed successfully hosts and it also shows up in Rancher Master Server.
Pls clarify the below queries.
Looking into the document, it mentions about UDP ports 4500 & 500. I suppose this is required for communication between Rancher Hosts only. These ports between Rancher Master Server & Rancher Hosts are not required to be open.
With the above security groups in place for Rancher Hosts, how does Rancher Master Server communicates with the agent. There are no inbound ports opened at rancher hosts security group. It seems to be working in my setup but curious to know how the communication happens between Master Server & Hosts.