On 12-08-29 01:51 AM, Andrei-Florian Staicu wrote:> I need to install puppet agent on some DMZ hosts, so I need to have
> all TCP ports.
> Can anyone tell me what the data flow is between agents and the master?
> Also, what would be the case when using MCollective, inseatad of puppet
kick?
If I''m not mistaken, in the simplest scenario where your puppetmaster
is
not interacting with external filebuckets, puppetDBs, schedulers and
whatnot, puppet clients pretty much only need to be able to establish a
TCP connection with the puppet master on port 8140. As long as you let
established connections out of the DMZ, then connection both ways should
be assured.
--
Gabriel Filion
--
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To post to this group, send email to puppet-users@googlegroups.com.
To unsubscribe from this group, send email to
puppet-users+unsubscribe@googlegroups.com.
For more options, visit this group at
http://groups.google.com/group/puppet-users?hl=en.