Puppet users - Nov 2013 - ports, protocols, and directionality

Hi,

For Open Source Puppet to be permitted on my network, I
need to know which ports, which protocols, and which direction
for the firewall.

Assume two nodes: the puppet master and the puppet agent.

Please advise and, preferably point me at a URL at Puppet Labs.

All I could find was this:

  
http://docs.puppetlabs.com/guides/setting_up.html#open-firewall-ports-on-server-and-agent-node

Stuart


-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/626baa41-0975-4437-a128-3e538b48cc5b%40googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

Its right there on the page you linked to:

"
Open Firewall Ports On Server and Agent Node

In order for the puppet master server to centrally manage agent nodes, you
may need to open port 8140 for incoming tcp connections on the puppet
master. Consult your firewall documentation for more details.

"

so, port 8140/tcp, its http(s), and thats agent to master.





On Mon, Nov 18, 2013 at 7:45 PM, Stuart Cracraft
<smcracraft@gmail.com>wrote:
> Hi,
>
> For Open Source Puppet to be permitted on my network, I
> need to know which ports, which protocols, and which direction
> for the firewall.
>
> Assume two nodes: the puppet master and the puppet agent.
>
> Please advise and, preferably point me at a URL at Puppet Labs.
>
> All I could find was this:
>
>
>
http://docs.puppetlabs.com/guides/setting_up.html#open-firewall-ports-on-server-and-agent-node
>
> Stuart
>
>
>  --
> You received this message because you are subscribed to the Google Groups
> "Puppet Users" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
>
https://groups.google.com/d/msgid/puppet-users/626baa41-0975-4437-a128-3e538b48cc5b%40googlegroups.com
> .
> For more options, visit https://groups.google.com/groups/opt_out.
>


-- 
Matthew Nicholson

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CA%2BnEbkZj2sU6kkAHNQJ46LLgButrs-Hb2w06KtjNedugTS3hGA%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.

There are more ports, no?
> On Nov 18, 2013, at 5:31 PM, Matthew Nicholson
<matthew.a.nicholson@gmail.com> wrote:
> 
> Its right there on the page you linked to: 
> 
> "
> Open Firewall Ports On Server and Agent Node
> In order for the puppet master server to centrally manage agent nodes, you
may need to open port 8140 for incoming tcp connections on the puppet master.
Consult your firewall documentation for more details.
> 
> "
> 
> so, port 8140/tcp, its http(s), and thats agent to master.
> 
> 
> 
> 
> 
> 
> 
>> On Mon, Nov 18, 2013 at 7:45 PM, Stuart Cracraft
<smcracraft@gmail.com> wrote:
>> Hi,
>> 
>> For Open Source Puppet to be permitted on my network, I
>> need to know which ports, which protocols, and which direction
>> for the firewall.
>> 
>> Assume two nodes: the puppet master and the puppet agent.
>> 
>> Please advise and, preferably point me at a URL at Puppet Labs.
>> 
>> All I could find was this:
>> 
>>  
http://docs.puppetlabs.com/guides/setting_up.html#open-firewall-ports-on-server-and-agent-node
>> 
>> Stuart
>> 
>> 
>> -- 
>> You received this message because you are subscribed to the Google
Groups "Puppet Users" group.
>> To unsubscribe from this group and stop receiving emails from it, send
an email to puppet-users+unsubscribe@googlegroups.com.
>> To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/626baa41-0975-4437-a128-3e538b48cc5b%40googlegroups.com.
>> For more options, visit https://groups.google.com/groups/opt_out.
> 
> 
> 
> -- 
> Matthew Nicholson
> -- 
> You received this message because you are subscribed to a topic in the
Google Groups "Puppet Users" group.
> To unsubscribe from this topic, visit
https://groups.google.com/d/topic/puppet-users/c6bl5sZsSc8/unsubscribe.
> To unsubscribe from this group and all its topics, send an email to
puppet-users+unsubscribe@googlegroups.com.
> To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CA%2BnEbkZj2sU6kkAHNQJ46LLgButrs-Hb2w06KtjNedugTS3hGA%40mail.gmail.com.
> For more options, visit https://groups.google.com/groups/opt_out.
-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/9CCD1366-A3AB-406E-A35A-E73E9F31452F%40me.com.
For more options, visit https://groups.google.com/groups/opt_out.

On 19 November 2013 04:32, Stuart Cracraft <smcracraft@me.com> wrote:
> There are more ports, no?
>
No, that''s it.  Unless you add to the mix things like puppetdb, where
you''d need the puppetdb and postresql ports opening up, dependent on
where
in your infrastructure you place those services.

Regards,

Matt.

-- 
You received this message because you are subscribed to the Google Groups
"Puppet Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to puppet-users+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/puppet-users/CAKUTv3JWqVDKbGm%2BfOtH5dLLNF%3Dkbe7WdH4gOurwu-%3DhOwjP%3Dg%40mail.gmail.com.
For more options, visit https://groups.google.com/groups/opt_out.