a9s Platform Required Ports

introduced in releaseDeploymentInstance GroupDirectionDeploymentInstance GroupProtocolPortDescription
Inception>allTCP22SSH
Inception>BOSH DirectorTCP8844CredHub API
Inception>BOSH DirectorTCP25555BOSH Director API
---------------------------
BOSH Director<>allUDP68
BOSH Director<>allTCP4222
BOSH Director<>allTCP6868
BOSH Director<>allTCP8443
BOSH Director<>allTCP25250
BOSH Director<>allTCP25555
BOSH Director<>allTCP25777
---------------------------
a9s-pgpg>consul-dnsconsulTCP8300
a9s-pgpg>consul-dnsconsulTCP/UDP8301
a9s-pgpg>a9s-pgpgTCP5432Server-To-Server
a9s-pgpg>a9s-pgpgTCP63145PostgreSQL WebService
a9s-pgpg>external Backup Store
a9s-pgpg>external syslog endpoint
a9s-pgpg>external graphite endpoint
---------------------------
backup-servicebackup-manager>consul-dnsconsulTCP8300
backup-servicebackup-manager>consul-dnsconsulTCP/UDP8301
backup-servicebackup-manager>a9s-pgpgTCP5432External Database
backup-servicebackup-manager>a9s-pgpgTCP3001API endpoint of the postgresql-backup-endpoint
backup-servicebackup-manager>a9s-pgpgTCP3000Backup Agent
backup-servicebackup-manager>a9s-data-servicebrokerTCP3000Used to find out existing instances
backup-servicebackup-manager>external Backup Store
backup-servicebackup-manager>a9s-elasticsearch2-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-elasticsearch5-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-elasticsearch6-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-logme-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-mongodb32-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-mongodb34-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-mongodb36-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-mysql101-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-postgresql94-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-postgresql10-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-postgresql11-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-rabbitmq36-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-rabbitmq37-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-redis32-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-redis40-instanceredisTCP3000Backup Agent
backup-servicebackup-manager>a9s-redis50-instanceredisTCP3000Backup Agent
backup-servicebackup-monit>consul-dnsconsulTCP8300
backup-servicebackup-monit>consul-dnsconsulTCP/UDP8301
backup-servicebackup-monit>a9s-data-servicebrokerTCP3000Used to find out existing instances
backup-servicebackup-monit>external Backup Store
backup-servicebackup-monit>external graphite endpoint
---------------------------
consul-dnsconsul>consul-dnsconsulTCP8300
consul-dnsconsul>consul-dnsconsulTCP/UDP8301Server-To-Server
consul-dnsconsul>a9s-pgpgTCP/UDP8301Consul Agent
consul-dnsconsul>backup-servicebackup-managerTCP/UDP8301Consul Agent
consul-dnsconsul>backup-servicebackup-monitTCP/UDP8301Consul Agent
consul-dnsconsul>service-guardguardTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-data-servicebrokerTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-data-servicedeployer-apiTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-data-serviceservice-dashboardTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-data-servicespiTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-elasticsearch2-instanceesTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-elasticsearch5-instanceesTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-elasticsearch6-instanceesTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-logme-instanceesTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-logme-instancekibanaTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-logme-instancelogstashTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-logme-instancesso-proxyTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-mongodb32-instancemongodbTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-mongodb34-instancemongodbTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-mongodb36-instancemongodbTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-mysql101-instancemysqlTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-postgresql94-instancepgTCP/UDP8301Consul Agent
8500Consul HTTP
consul-dnsconsul>a9s-postgresql10-instancepgTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-postgresql11-instancepgTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-rabbitmq36-instancemqTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-rabbitmq37-instancemqTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-redis32-instanceredisTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-redis40-instanceredisTCP/UDP8301Consul Agent
consul-dnsconsul>a9s-redis50-instanceredisTCP/UDP8301Consul Agent
consul-dnsdnsmasq>consul-dnsconsulTCP/UDP53Used to resolve internal Consul names
---------------------------
service-guardguard>consul-dnsconsulTCP8300
service-guardguard>consul-dnsconsulTCP/UDP8301
service-guardguard>a9s-pgpgTCP5432External Database
service-guardguard>a9s-data-servicebrokerTCP3000Used to find existing instances
service-guardguard-worker>consul-dnsconsulTCP8300
service-guardguard-worker>consul-dnsconsulTCP8301
service-guardguard-worker>a9s-pgpgTCP5432External Database
service-guardguard-worker>service-guardrestarterTCP3000Restart apps
service-guardrestarter-worker>cfgorouter/loadbalanacerTCP443CF API; create/update/delete security groups
service-guardrestarter-worker>cfgorouter/loadbalanacerTCP443CF API; restart apps
---------------------------
a9s-data-servicebroker>consul-dnsconsulTCP8300
a9s-data-servicebroker>consul-dnsconsulTCP/UDP8301
a9s-data-servicebroker>a9s-pgpgTCP5432External Database
a9s-data-servicebroker>a9s-data-servicedeployer-apiTCP3000Broker-To-Deployer
a9s-data-servicebroker>a9s-data-servicespiTCP3000Broker-To-SPI
a9s-data-servicebroker>a9s-billingcf_billingTCP8080
v1.45.0a9s-data-servicebroker>cfapiTCP443only required in case ops file 'ops/block_service_bindings_accross_orgs.yml' is used
a9s-data-servicedeployer-api>consul-dnsconsulTCP8300
a9s-data-servicedeployer-api>consul-dnsconsulTCP/UDP8301
a9s-data-servicedeployer-api>a9s-pgpgTCP5432External Database
a9s-data-servicedeployer-api>BOSH DirectorTCP25555Create/update/delete deployments
a9s-data-servicedeployer-api>BOSH DirectorTCP8443UAA
a9s-data-servicedeployment_updater>a9s-data-servicebrokerTCP3000Update service instances through the Broker
a9s-data-serviceservice-dashboard>consul-dnsconsulTCP8300
a9s-data-serviceservice-dashboard>consul-dnsconsulTCP/UDP8301
a9s-data-serviceservice-dashboard>cfgorouter/loadbalanacerTCP443CF API; for authorizing enduser requests
a9s-data-serviceservice-dashboard>cfnatsTCP4222Register route
a9s-data-serviceservice-dashboard>backup-servicebackup-managerTCP3000Check/trigger backups/restores
a9s-data-serviceservice-dashboard>a9s-data-servicebrokerTCP3000Check/trigger updates & trigger restores
not released yeta9s-data-servicesmoke-tests>a9s-data-serviceservice-dashboardTCPvia Load BalancerPublic Access
a9s-data-servicesmoke-tests>cfapiTCP443CF API; create/update/delete service instances
a9s-data-servicesmoke-tests>cfcellTCP80Bindingo Test App; required if Bindingo is setup to use non-SSL connections
a9s-data-servicesmoke-tests>cfcellTCP443Bindingo Test App; required if Bindingo is setup to use SSL connections
a9s-data-servicesmoke-tests>backup-servicebackup-managerTCP3000To test the backup/restore of the service instances
a9s-data-service (LogMe)smoke-tests>a9s-elasticsearch2-instanceesTCP9200Elasticsearch-Server; Tests call the Elasticsearch-Server directly instead of the Bindingo Test App
a9s-data-service (LogMe)smoke-tests>a9s-elasticsearch5-instanceesTCP9200Elasticsearch-Server; Tests call the Elasticsearch-Server directly instead of the Bindingo Test App
a9s-data-service (LogMe)smoke-tests>a9s-elasticsearch6-instanceesTCP9200Elasticsearch-Server; Tests call the Elasticsearch-Server directly instead of the Bindingo Test App
a9s-data-servicespi>consul-dnsconsulTCP8300
a9s-data-servicespi>consul-dnsconsulTCP/UDP8301
a9s-data-service (MongoDB)spi>a9s-mongodb32-instancemongodbTCP27017MongoDB-Server
a9s-data-service (MongoDB)spi>a9s-mongodb34-instancemongodbTCP27017MongoDB-Server
a9s-data-service (MongoDB)spi>a9s-mongodb36-instancemongodbTCP27017MongoDB-Server
a9s-data-service (MySQL)spi>a9s-mysql101-instancemysqlTCP3306MySQL-Server
a9s-data-service (PostgreSQL)spi>a9s-postgresql94-instancepgTCP5432PostgreSQL-Server
a9s-data-service (PostgreSQL)spi>a9s-postgresql10-instancepgTCP5432PostgreSQL-Server
a9s-data-service (PostgreSQL)spi>a9s-postgresql11-instancepgTCP5432PostgreSQL-Server
a9s-data-service (RabbitMQ)spi>a9s-rabbitmq36-instancemqTCP15672RabbitMQ HTTP API clients
a9s-data-service (RabbitMQ)spi>a9s-rabbitmq37-instancemqTCP15672RabbitMQ HTTP API clients
a9s-data-service (Harbor)spi>a9s-harborharbor-appTCP443Harbor API
a9s-data-service (Kubernetes)spi>a9s-kubernetesworkerTCP443Harbor API
a9s-data-servicetemplates-uploader>a9s-data-servicedeployer-apiTCP3000Upload service instance templates to the Deployer
---------------------------
a9s-elasticsearch2-instancees>consul-dnsconsulTCP8300
a9s-elasticsearch2-instancees>consul-dnsconsulTCP/UDP8301
a9s-elasticsearch2-instancees>external Backup Store
a9s-elasticsearch2-instancees>external syslog endpoint
a9s-elasticsearch2-instancees>external graphite endpoint
a9s-elasticsearch2-instancees>a9s-elasticsearch2-instanceesTCP9300Server-To-Server
a9s-elasticsearch5-instancees>consul-dnsconsulTCP8300
a9s-elasticsearch5-instancees>consul-dnsconsulTCP/UDP8301
a9s-elasticsearch5-instancees>external Backup Store
a9s-elasticsearch5-instancees>external syslog endpoint
a9s-elasticsearch5-instancees>external graphite endpoint
a9s-elasticsearch5-instancees>a9s-elasticsearch5-instanceesTCP9300Server-To-Server
a9s-elasticsearch6-instancees>consul-dnsconsulTCP8300
a9s-elasticsearch6-instancees>consul-dnsconsulTCP/UDP8301
a9s-elasticsearch6-instancees>external Backup Store
a9s-elasticsearch6-instancees>external syslog endpoint
a9s-elasticsearch6-instancees>external graphite endpoint
a9s-elasticsearch6-instancees>a9s-elasticsearch6-instanceesTCP9300Server-To-Server
---------------------------
a9s-logme-instancees>consul-dnsconsulTCP8300
a9s-logme-instancees>consul-dnsconsulTCP/UDP8301
a9s-logme-instancees>external Backup Store
a9s-logme-instancees>external syslog endpoint
a9s-logme-instancees>external graphite endpoint
a9s-logme-instancees>a9s-logme-instanceesTCP9300Server-To-Server
a9s-logme-instancekibana>consul-dnsconsulTCP8300
a9s-logme-instancekibana>consul-dnsconsulTCP/UDP8301
a9s-logme-instancekibana>external Backup Store
a9s-logme-instancekibana>external syslog endpoint
a9s-logme-instancekibana>external graphite endpoint
a9s-logme-instancekibana>a9s-logme-instanceesTCP9200Kibana-To-Elasticsearch
a9s-logme-instancelogstash>consul-dnsconsulTCP8300
a9s-logme-instancelogstash>consul-dnsconsulTCP/UDP8301
a9s-logme-instancelogstash>external Backup Store
a9s-logme-instancelogstash>external syslog endpoint
a9s-logme-instancelogstash>external graphite endpoint
a9s-logme-instancelogstash>a9s-logme-instanceesTCP9200Syslog-To-Elasticsearch
a9s-logme-instancesso-proxy>consul-dnsconsulTCP8300
a9s-logme-instancesso-proxy>consul-dnsconsulTCP/UDP8301
a9s-logme-instancesso-proxy>external Backup Store
a9s-logme-instancesso-proxy>external syslog endpoint
a9s-logme-instancesso-proxy>external graphite endpoint
a9s-logme-instancesso-proxy>cfgorouter/loadbalanacerTCP443CF API; used to authorize end user requests
a9s-logme-instanceroute_registrar>cfnatsTCP4222Register route
---------------------------
a9s-mongodb32-instancemongodb>consul-dnsconsulTCP8300
a9s-mongodb32-instancemongodb>consul-dnsconsulTCP/UDP8301
a9s-mongodb32-instancemongodb>external Backup Store
a9s-mongodb32-instancemongodb>external syslog endpoint
a9s-mongodb32-instancemongodb>external graphite endpoint
a9s-mongodb32-instancemongodb>a9s-mongodb32-instancemongodbTCP27017Server-To-Server
a9s-mongodb34-instancemongodb>consul-dnsconsulTCP8300
a9s-mongodb34-instancemongodb>consul-dnsconsulTCP/UDP8301
a9s-mongodb34-instancemongodb>external Backup Store
a9s-mongodb34-instancemongodb>external syslog endpoint
a9s-mongodb34-instancemongodb>external graphite endpoint
a9s-mongodb34-instancemongodb>a9s-mongodb34-instancemongodbTCP27017Server-To-Server
a9s-mongodb36-instancemongodb>consul-dnsconsulTCP8300
a9s-mongodb36-instancemongodb>consul-dnsconsulTCP/UDP8301
a9s-mongodb36-instancemongodb>external Backup Store
a9s-mongodb36-instancemongodb>external syslog endpoint
a9s-mongodb36-instancemongodb>external graphite endpoint
a9s-mongodb36-instancemongodb>a9s-mongodb36-instancemongodbTCP27017Server-To-Server
---------------------------
a9s-mysql101-instancemysql>consul-dnsconsulTCP8300
a9s-mysql101-instancemysql>consul-dnsconsulTCP/UDP8301
a9s-mysql101-instancemysql>external Backup Store
a9s-mysql101-instancemysql>external syslog endpoint
a9s-mysql101-instancemysql>external graphite endpoint
a9s-mysql101-instancemysql>a9s-mysql101-instancemysqlTCP4567Server-To-Server
---------------------------
a9s-postgresql94-instancepg>consul-dnsconsulTCP8300
a9s-postgresql94-instancepg>consul-dnsconsulTCP/UDP8301
a9s-postgresql94-instancepg>external Backup Store
a9s-postgresql94-instancepg>external syslog endpoint
a9s-postgresql94-instancepg>external graphite endpoint
a9s-postgresql94-instancepg>a9s-postgresql94-instancepgTCP5432Server-To-Server
a9s-postgresql94-instancepg>a9s-postgresql94-instancepgTCP63145PostgreSQL WebService
a9s-postgresql10-instancepg>consul-dnsconsulTCP8300
a9s-postgresql10-instancepg>consul-dnsconsulTCP/UDP8301
a9s-postgresql10-instancepg>external Backup Store
a9s-postgresql10-instancepg>external syslog endpoint
a9s-postgresql10-instancepg>external graphite endpoint
a9s-postgresql10-instancepg>a9s-postgresql10-instancepgTCP5432Server-To-Server
a9s-postgresql10-instancepg>a9s-postgresql10-instancepgTCP63145PostgreSQL WebService
a9s-postgresql11-instancepg>consul-dnsconsulTCP8300
a9s-postgresql11-instancepg>consul-dnsconsulTCP/UDP8301
a9s-postgresql11-instancepg>external Backup Store
a9s-postgresql11-instancepg>external syslog endpoint
a9s-postgresql11-instancepg>external graphite endpoint
a9s-postgresql11-instancepg>a9s-postgresql11-instancepgTCP5432Server-To-Server
a9s-postgresql11-instancepg>a9s-postgresql11-instancepgTCP63145PostgreSQL WebService
---------------------------
a9s-rabbitmq36-instancemq>consul-dnsconsulTCP8300
a9s-rabbitmq36-instancemq>consul-dnsconsulTCP/UDP8301
a9s-rabbitmq36-instancemq>external Backup Store
a9s-rabbitmq36-instancemq>external syslog endpoint
a9s-rabbitmq36-instancemq>external graphite endpoint
a9s-rabbitmq36-instancemq>a9s-rabbitmq36-instancemqTCP25672Server-To-Server
a9s-rabbitmq37-instancemq>consul-dnsconsulTCP8300
a9s-rabbitmq37-instancemq>consul-dnsconsulTCP/UDP8301
a9s-rabbitmq37-instancemq>external Backup Store
a9s-rabbitmq37-instancemq>external syslog endpoint
a9s-rabbitmq37-instancemq>external graphite endpoint
a9s-rabbitmq37-instancemq>a9s-rabbitmq37-instancemqTCP25672Server-To-Server
1.43.0a9s-rabbitmq37-instanceroute_registrar>cfnatsTCP4222Register route
---------------------------
a9s-redis32-instanceredis>consul-dnsconsulTCP8300
a9s-redis32-instanceredis>consul-dnsconsulTCP/UDP8301
a9s-redis32-instanceredis>external Backup Store
a9s-redis32-instanceredis>external syslog endpoint
a9s-redis32-instanceredis>external graphite endpoint
a9s-redis32-instanceredis>a9s-redis32-instanceredisTCP6379Server-To-Server
a9s-redis32-instanceredis>a9s-redis32-instanceredisTCP26379Server-To-Server
a9s-redis40-instanceredis>consul-dnsconsulTCP8300
a9s-redis40-instanceredis>consul-dnsconsulTCP/UDP8301
a9s-redis40-instanceredis>external Backup Store
a9s-redis40-instanceredis>external syslog endpoint
a9s-redis40-instanceredis>external graphite endpoint
a9s-redis40-instanceredis>a9s-redis40-instanceredisTCP6379Server-To-Server
a9s-redis40-instanceredis>a9s-redis40-instanceredisTCP26379Server-To-Server
a9s-redis50-instanceredis>consul-dnsconsulTCP8300
a9s-redis50-instanceredis>consul-dnsconsulTCP/UDP8301
a9s-redis50-instanceredis>external Backup Store
a9s-redis50-instanceredis>external syslog endpoint
a9s-redis50-instanceredis>external graphite endpoint
a9s-redis50-instanceredis>a9s-redis50-instanceredisTCP6379Server-To-Server
a9s-redis50-instanceredis>a9s-redis50-instanceredisTCP26379Server-To-Server
---------------------------
cfapi>consul-dnsdnsmasqTCP53Domain Name Server
cfapi>a9s-data-servicebrokerTCP3000Create/update/delete services
cfcell>consul-dnsdnsmasqTCP53Domain Name Server
cfcell>a9s-elasticsearch2-instanceesTCP9200Elasticsearch-Server
cfcell>a9s-elasticsearch5-instanceesTCP9200Elasticsearch-Server
cfcell>a9s-elasticsearch6-instanceesTCP9200Elasticsearch-Server
cfcell>a9s-logme-instancekibanaTCP80Kibana Dashboard
cfcell>a9s-logme-instancelogstashTCP/UDP514Provides a syslog endpoint
cfcell>a9s-mongodb32-instancemongodbTCP27017MongoDB-Server
cfcell>a9s-mongodb34-instancemongodbTCP27017MongoDB-Server
cfcell>a9s-mongodb36-instancemongodbTCP27017MongoDB-Server
cfcell>a9s-mysql101-instancemysqlTCP3306MySQL-Server
cfcell>a9s-postgresql94-instancepgTCP5432PostgreSQL-Server
cfcell>a9s-postgresql10-instancepgTCP5432PostgreSQL-Server
cfcell>a9s-postgresql11-instancepgTCP5432PostgreSQL-Server
cfcell>a9s-rabbitmq36-instancemqTCP4369RabbitMQ epmd
cfcell>a9s-rabbitmq36-instancemqTCP5672RabbitMQ AMQP client without TLS
1.43.0cfcell>a9s-rabbitmq36-instancemqTCP5671RabbitMQ AMQP client with TLS
cfcell>a9s-rabbitmq36-instancemqTCP15672RabbitMQ HTTP API clients
cfcell>a9s-rabbitmq37-instancemqTCP4369RabbitMQ epmd
cfcell>a9s-rabbitmq37-instancemqTCP5672RabbitMQ AMQP client with and without TLS
cfcell>a9s-rabbitmq37-instancemqTCP15672RabbitMQ HTTP API clients
1.43.0cfcell>a9s-rabbitmq37-instancemqTCP1883RabbitMQ MQTT
1.43.0cfcell>a9s-rabbitmq37-instancemqTCP8883RabbitMQ MQTTS
1.43.0cfcell>a9s-rabbitmq37-instancemqTCP61613RabbitMQ STOMP
1.43.0cfcell>a9s-rabbitmq37-instancemqTCP61614RabbitMQ STOMPS
cfcell>a9s-rabbitmq37-instancemqUDP57058???
cfcell>a9s-redis32-instanceredisTCP6379Redis-Server
cfcell>a9s-redis40-instanceredisTCP6379Redis-Server
cfcell>a9s-redis50-instanceredisTCP6379Redis-Server
cfrouter>a9s-data-serviceservice-dashboardTCP3000Redirects enduser requests to the Dashboard
cfrouter>a9s-logme-instancesso-proxyTCP3000Redirects enduser requests to the Dashboard
cfrouter>a9s-billinggrafanaTCP8080Redirects user requests to the Graphana Dashboard to see platform usage information
---------------------------
a9s-billinggrafana>cfnatsTCP4222Register route
a9s-billinggrafana>a9s-pgpgTCP5432
a9s-billingcf_billing>a9s-pgpgTCP5432
a9s-billinga9s-invoices>a9s-pgpgTCP5432
a9s-billingsameness>a9s-pgpgTCP5432
a9s-billingcf_billing>a9s-billinga9s-invoicesTCP8080
a9s-billingcf_billing>a9s-billingsamenessTCP8080
a9s-billinga9s-utilization-monitor<>a9s-harborharbor-appTCP443
---------------------------
a9s-kubernetes-instancemaster>a9s-kubernetes-instancemasterTCP2379etcd client requests (flannel also uses this connection)
a9s-kubernetes-instancemaster>a9s-kubernetes-instancemasterTCP2380etcd peer communication.
a9s-kubernetes-instancemaster>a9s-kubernetes-instancemasterUDP8472For sending encapsulated packets. (VXLan - flannel)
a9s-kubernetes-instancemaster>a9s-kubernetes-instanceworkerUDP8472For sending encapsulated packets. (VXLan - flannel)
a9s-kubernetes-instancemaster>a9s-kubernetes-instancemasterTCP8443kube-apiserver (also used by kubectl)
a9s-routerrouter>a9s-kubernetes-instanceworkerTCP31390kube-proxy (ingress controller - HTTPS)
a9s-kubernetes-instancemaster>consul-dnsconsulTCP8300
a9s-kubernetes-instancemaster>consul-dnsconsulTCP8301
---------------------------
a9s-routerrouter>a9s-kubernetes-instanceworkerTCP31390kube-proxy (ingress controller - HTTPS)
a9s-routerregistry>a9s-routerrouterTCP5555Data Plane API
a9s-kubernetes-instanceworker>a9s-routerregistryTCP62357Route publishing
---------------------------
a9s-harborharbo-app>a9s-harborpgTCP5432PostgreSQL process
a9s-harborharbo-app>a9s-harborredisTCP6379Redis-Server
cfrouter>a9s-harborharbor-appTCP80Harbor portal and core API (HTTP)
cfrouter>a9s-harborharbor-appTCP443Harbor portal and core API (HTTPS)
cfrouter>a9s-harborharbor-appTCP4443Connections to the Docker Content Trust service for Harbor (Notary).
a9s-harborharbo-app>cfnatsTCP4222NATS Server
a9s-harborharbo-app>consul-dnsconsulTCP8300
a9s-harborharbo-app>consul-dnsconsulTCP8301
a9s-harborpg>consul-dnsconsulTCP8300
a9s-harborpg>consul-dnsconsulTCP8301
a9s-harborredis>consul-dnsconsulTCP8300
a9s-harborredis>consul-dnsconsulTCP8301