Network connectivity requirements when IPsec is enabled

When IPsec is enabled in Red Hat OpenShift Container Platform, you must configure the network connectivity between machines to allow cluster components to communicate. Each machine must be able to resolve the hostnames of all other machines in the cluster.

Table 15. Ports used for all-machine to all-machine communications
Protocol Port Description

UDP

500

IPsec IKE packets

4500

IPsec NAT-T packets

ESP

N/A

IPsec Encapsulating Security Payload (ESP)

← Previous: Prerequisites for IPsec encryption for external traffic | ↑ Up: Modes of operation | ⌂ Home: Red Hat OpenShift Container Platform | Next: IPsec encryption for pod-to-pod traffic →