MOSK¶
Communications between Mirantis OpenStack for Kubernetes (MOSK) components are provided by the Calico networking. All internal communications occur through the Calico tunnel through the VXLAN or WireGuard protocols.
Note
Since Container Cloud 2.29.0 (Cluster releases 17.4.0 and 16.4.0), WireGuard is deprecated. If you still require the feature, contact Mirantis support for further information.
Caution
These ports are only used for in-cluster communications. Open them only to a trusted network and never at a perimeter firewall.
Component |
Protocol |
Port |
Description |
|---|---|---|---|
Calico VXLAN |
UDP |
4792 |
Calico networking with VXLAN enabled |
Calico WireGuard |
UPD |
51820 |
Calico networking with IPv4 Wireguard enabled |
In-cluster communications between MetalLB speaker components are done using the LCM network. MetalLB components also provide metrics to be collected by StackLight.
Caution
These ports are only used for in-cluster communications. Open them only to a trusted network and never at a perimeter firewall.
Component |
Protocol |
Port |
Description |
|---|---|---|---|
MetalLB MemberList |
TCP/UDP |
7947 |
MetalLB speaker communications using MemberList |
MetalLB metrics |
TCP |
7472 |
MetalLB controller & speaker metrics |