From 5026a40ec183143d1cbdf1495d917a4fbc6321c6 Mon Sep 17 00:00:00 2001 From: csawyerYumaed Date: Tue, 23 Feb 2016 11:27:15 -0800 Subject: [PATCH 1/2] Update documentation - add Network Ports. Update security.html.markdown add section on Network Port usage. TODO: add Atlas port usage. --- website/source/docs/internals/security.html.markdown | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/website/source/docs/internals/security.html.markdown b/website/source/docs/internals/security.html.markdown index cc02b72bc2..f92af48b31 100644 --- a/website/source/docs/internals/security.html.markdown +++ b/website/source/docs/internals/security.html.markdown @@ -53,3 +53,11 @@ When designing security into a system you design it to fit the threat model. Our goal is not to protect top secret data but to provide a "reasonable" level of security that would require an attacker to commit a considerable amount of resources to defeat. + +## Network Ports + +Consul uses the following ports on the network: +* TCP 8300 (RPC - LAN & WAN) +* TCP & UDP 8301 (LAN GOSSIP) +* TCP & UDP 8302 (WAN GOSSIP) +* TCP 8500 (WEBUI - not enabled by default) From c1de5b7a130aaf0afa0c606905cad28671f2a834 Mon Sep 17 00:00:00 2001 From: James Phillips Date: Wed, 9 Mar 2016 21:21:49 -0800 Subject: [PATCH 2/2] Adds a reference to the network ports from the security page. --- website/source/docs/agent/options.html.markdown | 8 ++++++-- website/source/docs/internals/security.html.markdown | 8 +++----- 2 files changed, 9 insertions(+), 7 deletions(-) diff --git a/website/source/docs/agent/options.html.markdown b/website/source/docs/agent/options.html.markdown index 3a27023575..ce740a206f 100644 --- a/website/source/docs/agent/options.html.markdown +++ b/website/source/docs/agent/options.html.markdown @@ -688,7 +688,7 @@ definitions support being updated during a reload. [watch documentation](/docs/agent/watches.html) for more detail. Watches can be modified when the configuration is reloaded. -## Ports Used +## Ports Used Consul requires up to 5 different ports to work properly, some on TCP, UDP, or both protocols. Below we document the requirements for each @@ -711,7 +711,11 @@ port. * DNS Interface (Default 8600). Used to resolve DNS queries. TCP and UDP. -## Reloadable Configuration +Consul will also make an outgoing connection to HashiCorp's servers for +Atlas-related features and to check for the availability of newer versions +of Consul. This will be a TLS-secured TCP connection to `scada.hashicorp.com:7223`. + +## Reloadable Configuration Reloading configuration does not reload all configuration items. The items which are reloaded include: diff --git a/website/source/docs/internals/security.html.markdown b/website/source/docs/internals/security.html.markdown index f92af48b31..355c880fda 100644 --- a/website/source/docs/internals/security.html.markdown +++ b/website/source/docs/internals/security.html.markdown @@ -56,8 +56,6 @@ amount of resources to defeat. ## Network Ports -Consul uses the following ports on the network: -* TCP 8300 (RPC - LAN & WAN) -* TCP & UDP 8301 (LAN GOSSIP) -* TCP & UDP 8302 (WAN GOSSIP) -* TCP 8500 (WEBUI - not enabled by default) +For configuring network rules to support Consul, please see [Ports Used](/docs/agent/options.html#ports) +for a listing of network ports used by Consul and details about which features +they are used for.