/* Copyright 2019 The Kubernetes Authors. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. */ package wellknownports const ( // KubeAPIServer is the port where kube-apiserver listens. KubeAPIServer = 443 // NodeupChallenge is the port where nodeup listens for challenges. NodeupChallenge = 3987 // KopsControllerPort is the port where kops-controller listens. KopsControllerPort = 3988 // NodeLocalDNSHealthCheck is the port where the node-local-dns health check listens. NodeLocalDNSHealthCheck = 3989 // KubeAPIServerHealthCheck is the port where kube-apiserver-healthcheck listens. KubeAPIServerHealthCheck = 3990 EtcdCiliumGRPC = 3991 EtcdCiliumQuarantinedClientPort = 3992 // DNSControllerGossipMemberlist is the port where dns-controller listens for the memberlist-backed gossip DNSControllerGossipMemberlist = 3993 // EtcdMainQuarantinedClientPort is the port used by etcd when quarantined, for the main etcd EtcdMainQuarantinedClientPort = 3994 // EtcdEventsQuarantinedClientPort is the port used by etcd when quarantined, for the events etcd EtcdEventsQuarantinedClientPort = 3995 // EtcdMainGRPC is the GRPC port used by etcd-manager, for the main etcd EtcdMainGRPC = 3996 // EtcdEventsGRPC is the GRPC port used by etcd-manager, for the events etcd EtcdEventsGRPC = 3997 // DNSControllerGossipWeaveMesh is the port where dns-controller listens for the weave-mesh backend gossip DNSControllerGossipWeaveMesh = 3998 // ProtokubeGossipWeaveMesh is the port where protokube listens for the weave-mesh-backed gossip ProtokubeGossipWeaveMesh = 3999 // ProtokubeGossipMemberlist is the port where protokube listens for the memberlist-backed gossip ProtokubeGossipMemberlist = 4000 // 4001 is etcd main, 4002 is etcd events // EtcdCiliumClientPort is the port were the Cilium etcd cluster listens EtcdCiliumClientPort = 4003 // CiliumOperatorPrometheusPort is the port the Cilium Operator exposes metrics CiliumPrometheusOperatorPort = 6942 // CiliumPrometheusPort is the default port where Cilium exposes metrics CiliumPrometheusPort = 9090 // CiliumHubblePrometheusPort is the default port where Hubble exposes metrics CiliumHubblePrometheusPort = 9091 // VxlanUDP is the port used by VXLAN tunneling over UDP VxlanUDP = 8472 // AWSLBCMetricsPort is reserved for the AWS Load Balancer Controller's metrics. AWSLBCMetricsPort = 9442 // KubeletAPI is the port where kubelet listens KubeletAPI = 10250 ) type PortRange struct { Min int Max int } func DNSGossipPortRanges() []PortRange { return []PortRange{ // 3993 is used by dns-controller, which is less important, so we might be able to drop it {Min: 3993, Max: 3993}, {Min: 3998, Max: 4000}, } } func ETCDPortRanges() []PortRange { return []PortRange{ {Min: 3994, Max: 3997}, } }