Weave: Which ports to open in firewall?

Created on 10 Oct 2014  路  1Comment  路  Source: weaveworks/weave

I've two servers on intranet and 2 servers on public. I want to join all four onto weave network. For my intranet servers there is only one public IP. Documentation of weave says open port 6783 on firewall. Which host should I map this port with? I have two servers behind firewall so which server should I pick to open the firewall traffic? How about other server will it still be able to communicate with weave?

question

Most helpful comment

It's easier if you make the connections from intranet out to public. So, if the servers were int1, int2, pub1. pub2, then:

on pub1: weave launch pub2
on pub2: weave launch pub1
on int1: weave launch pub1 pub2 int2
on int2: weave launch pub1 pub2 int1

You may have to open 6783 (tcp and udp) outgoing. If the firewall does NAT, it will remap this port for at least one connection, but that will happen automatically.

>All comments

It's easier if you make the connections from intranet out to public. So, if the servers were int1, int2, pub1. pub2, then:

on pub1: weave launch pub2
on pub2: weave launch pub1
on int1: weave launch pub1 pub2 int2
on int2: weave launch pub1 pub2 int1

You may have to open 6783 (tcp and udp) outgoing. If the firewall does NAT, it will remap this port for at least one connection, but that will happen automatically.

Was this page helpful?
0 / 5 - 0 ratings