From 893d6520f43955be92a0124e80a1a54a4ba1e5a5 Mon Sep 17 00:00:00 2001 From: schmidt-scaled Date: Fri, 19 Jun 2026 16:07:35 +0300 Subject: [PATCH] docs(network-ports): de-duplicate rows and drop firewall ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The shared network port table (included in install-cp and k8s-storage-plane) listed each control<->storage flow twice — one row for the egress end and one for the ingress end of the same port. Collapse those pairs into a single row per service (Direction 'ingress, egress', Hosts 'storage, control'), matching the style already used by the nvmf-internal and Monitoring rows. Also remove the spdk-firewall-proxy rows (50001-50065) and their deprecation footnote: port blocking is now done in-band via the SPDK nvmf_port_block RPC, so no separate firewall-proxy port range needs to be opened. --- snippets/network-port-table.md | 26 ++++++++++---------------- 1 file changed, 10 insertions(+), 16 deletions(-) diff --git a/snippets/network-port-table.md b/snippets/network-port-table.md index 5a3e7802..c74623ff 100644 --- a/snippets/network-port-table.md +++ b/snippets/network-port-table.md @@ -1,16 +1,10 @@ -| Service | Direction | Hosts | Network | Port(s) | Protocol(s) | -|---------------------------------|-------------------|---------|---------|----------------------------------|-------------| -| ICMP | ingress | control | Control | - | ICMP | -| spdk-http-proxy | egress | control | Control | 5000 | TCP | -| spdk-http-proxy | ingress | storage | Control | 5000 | TCP | -| spdk-firewall-proxy1 | egress | control | Control | 50001-50065 | TCP | -| spdk-firewall-proxy1 | ingress | storage | Control | 50001-50065 | TCP | -| nvmf (client-target) | egress | client | Storage | 4420-4499 | TCP | -| nvmf (internal) | ingress, egress | storage | Storage | 4420-4499 | TCP | -| FoundationDB | ingress | control | Control | 4500 | TCP | -| Control plane API | egress | control | Control | 80 | TCP | -| Control plane RPC | egress | control | Control | 8080-9044 | TCP | -| Control plane RPC | ingress | storage | Control | 8080-9044 | TCP | -| Monitoring Stack | ingress, egress | control | Control | 12202, 13301, 13302, 9200, 9090 | TCP | - -

1Deprecated since 26.2.3

+| Service | Direction | Hosts | Network | Port(s) | Protocol(s) | +|----------------------|-----------------|------------------|---------|----------------------------------|-------------| +| ICMP | ingress | control | Control | - | ICMP | +| spdk-http-proxy | ingress, egress | storage, control | Control | 5000 | TCP | +| nvmf (client-target) | egress | client | Storage | 4420-4499 | TCP | +| nvmf (internal) | ingress, egress | storage | Storage | 4420-4499 | TCP | +| FoundationDB | ingress | control | Control | 4500 | TCP | +| Control plane API | egress | control | Control | 80 | TCP | +| Control plane RPC | ingress, egress | storage, control | Control | 8080-9044 | TCP | +| Monitoring Stack | ingress, egress | control | Control | 12202, 13301, 13302, 9200, 9090 | TCP |