Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Operations Bridge Suite2017.04

Administer > Administer the ITOM Platform > Security > Security Hardening

Network and Communication Security

HPE recommends that you add the iptables rules listed below to the following below tables.

Important Apart from the listed ports, all other ports should be blocked at the localhost level.

Required ports	Service	Add rules on Server	Direction	Short description
111	NFS	NFS server	Nodes ->NFS Server	NFS server port access by all nodes
2049	NFS	NFS server	Nodes ->NFS Server	NFS server port access by all nodes
2380	Etcd	Master Node	Master<-> Master	Etcd service port for etcd cluster communication
4001	Etcd	Master Node	Nodes -> Master	Etcd service port for connection from client
4194	Kubernetes	All Nodes in Cluster	Localhost only	cAdvisor for local kubelet
5000	Private Registry	All Nodes in Cluster	Localhost only	Registry port for local host
5443	MngPortal	Ingress Node	All -> Ingress Node	The port exposed on ingress node. all clients could access this port
8200	Vault	Master Node	Nodes->Master	Vault port for client connection
8443	kubernetes	Master Node	Nodes->Master	API server port for client connection
10250	Kubernetes	All Nodes in Cluster	Nodes->Nodes	Kubernetes port for internal communication
10251	Kubernetes		Nodes->Nodes	Kubernetes port for internal communication
10252	Kubernetes		Nodes->Nodes	Kubernetes port for internal communication
10255	Kubernetes		Nodes->Nodes	Kubernetes port for internal communication
20048	NFS	NFS server	Nodes ->NFS Server	NFS server port access by all nodes

Example:

The cluster is installed on 10.10.10.10, 10.10.10.11, 10.10.10.12. The Master Node on: 10.10.10.10

To add an iptable rules to port 8443 on the master node do the following:

iptables -I INPUT 1 -p tcp -m tcp -s 0.0.0.0/0 --dport 8443 -j DROP

iptables -I INPUT 1 -p tcp -s 127.0.0.1 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.10 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.11 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.12 --dport 8443 -j ACCEPT