Use optional port settings

To allow external access to services and APIs in MicroShift, you can add custom ports to your firewall configuration. Use the listed ports and protocols as a guide for HTTP, HTTPS, NodePort, mDNS, and API access.

For a complete list of ports and protocols, see "Optional ports".

The following examples show commands to open firewall access for services running on MicroShift.

Procedure
  • To add customized ports to your firewall configuration, use the following command syntax:

    $ sudo firewall-cmd --permanent --zone=public --add-port=<port number>/<port protocol>

    For example, to configure a port for the MicroShift API server, enter the following command:

    $ sudo firewall-cmd --permanent --zone=public --add-port=6443/tcp

    To close unnecessary ports in your MicroShift instance, follow the procedure in "Closing unused or unnecessary ports to enhance network security".