Konvoy Ports

This section describes pre-configured ports in your Konvoy deployment.

Konvoy Components listen on multiple ports on each node. These ports must be available for installation to succeed.

Before you begin

To perform an installation, Ansible needs SSH connectivity on Port 22.
Detailed aspects of the networking components that come together to form a Konvoy networking stack are available in the networking section.
You must use appropriate network mechanisms to prevent unauthorized access to cluster nodes. Refer to the documentation on Access and Authentication.
By default, pods are non-isolated; they accept traffic from any source. Pods become isolated by having a NetworkPolicy that selects them. Once there is any NetworkPolicy in a namespace selecting a particular pod, that pod will reject any connections that are not allowed by any NetworkPolicy. Refer to the documentation for details on how Konvoy integrates Calico to support Network Policies.
During installation Konvoy can be configured to automatically add iptables the rules outlined below.