Search for	Example	Results
A single word	`cat`	Topics that contain the word "cat". You will also find its grammatical variations, such as "cats".
A phrase. You can specify that the search results contain a specific phrase.	`"cat food"` (quotation marks)	Topics that contain the literal phrase "cat food" and all its grammatical variations. Without the quotation marks, the query is equivalent to specifying an OR operator, which finds topics with one of the individual words instead of the phrase.

Search for	Operator	Example
Two or more words in the same topic	`AND` `and` `+` (plus symbol) `&` (ampersand)	`cat AND dog` `"cat food"+milk` `"cat food"&"dog food"`
Either word in a topic	`OR` `or` `\|` (pipe)	`cat OR dog` `cat \| dog`
Topics that do not contain a specific word or phrase	`NOT` `not` `!` (exclamation point)	`NOT cat` `! dog`
Topics that contain one string and do not contain another	`^` (caret)	`cat ^ mouse`
A combination of search types	`( )` parentheses	`cat + (dog \| mouse)` `cat \| dog + (! mouse)`

Operations Bridge Suite2017.08

Administer > Administer the Container Deployment Foundation > Network and Communication Security

Network and communication security

HPE recommends that you add the iptables rules listed below.

Important Apart from the listed ports on the specific hosts, all other ports should be blocked at the local host level.

Target server to configure the rules	Required ports	Service	Direction	Short description
NFS Server	111	NFS	Nodes ->NFS Server	NFS server port access by all nodes
NFS Server	2049	NFS	Nodes ->NFS Server	NFS server port access by all nodes
Master Node	2380	Etcd	Master<-> Master	Etcd service port for etcd cluster communication
Master Node	4001	Etcd	Nodes -> Master	Etcd service port for connection from client
All Nodes in Cluster	4194	Kubernetes	Localhost only	Cadvisor for local kubelet
All Nodes in Cluster	5000	Private Registry	Localhost only	Registry port for local host
Ingress Node	5443	MngPortal	All -> Ingress Node	The port exposed on ingress node. all clients could access this port
Master Node	8200	Vault	Nodes->Master	Vault port for client connection
Master Node	8201	Vault	Nodes->Master	Vault port for peer member connection
Master Node	8443	kubernetes	Nodes->Master	API server port for client connection
All Nodes in Cluster	10250	Kubernetes	Nodes->Nodes	Kubernete port for internal communication
All Nodes in Cluster	10251	Kubernetes	Nodes->Nodes	Kubernete port for internal communication
All Nodes in Cluster	10252	Kubernetes	Nodes->Nodes	Kubernete port for internal communication
All Nodes in Cluster	10255	Kubernetes	Master ->Nodes	Kubernete port for internal communication
NFS Server	20048	NFS	Nodes ->NFS Server	NFS server port access by all nodes

Example:

The cluster is installed on 10.10.10.10, 10.10.10.11, 10.10.10.12. The Master Node on: 10.10.10.10

To add an iptable rules to port 8443 on the master node do the following:

iptables -I INPUT 1 -p tcp -m tcp -s 0.0.0.0/0 --dport 8443 -j DROP

iptables -I INPUT 1 -p tcp -s 127.0.0.1 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.10 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.11 --dport 8443 -j ACCEPT

iptables -I INPUT 1 -p tcp -s 10.10.10.12 --dport 8443 -j ACCEPT