github
/
consul
mirror of https://github.com/hashicorp/consul
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

Merge pull request #1820 from hashicorp/f-port-docs 

Adds a reference to the network ports from the security guide.
pull/1629/head
James Phillips 2016-03-09 21:22:41 -08:00
parent 6e2c106006 c1de5b7a13
commit 01ae1e7dfe
2 changed files with 12 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
website/source/docs/agent/options.html.markdown
View File

@ -722,7 +722,7 @@ Consul will not enable TLS for the HTTP API unless the `https` port has been ass
[watch documentation](/docs/agent/watches.html) for more detail. Watches can be [watch documentation](/docs/agent/watches.html) for more detail. Watches can be
modified when the configuration is reloaded. modified when the configuration is reloaded.
## Ports Used ## <a id="ports"></a>Ports Used
Consul requires up to 5 different ports to work properly, some on Consul requires up to 5 different ports to work properly, some on
TCP, UDP, or both protocols. Below we document the requirements for each TCP, UDP, or both protocols. Below we document the requirements for each
@ -745,7 +745,11 @@ port.
* DNS Interface (Default 8600). Used to resolve DNS queries. TCP and UDP. * DNS Interface (Default 8600). Used to resolve DNS queries. TCP and UDP.
## <a id="reloadable-configuration"></a>Reloadable Configuration</a> Consul will also make an outgoing connection to HashiCorp's servers for
Atlas-related features and to check for the availability of newer versions
of Consul. This will be a TLS-secured TCP connection to `scada.hashicorp.com:7223`.
## <a id="reloadable-configuration"></a>Reloadable Configuration
Reloading configuration does not reload all configuration items. The Reloading configuration does not reload all configuration items. The
items which are reloaded include: items which are reloaded include:

6
website/source/docs/internals/security.html.markdown
View File

@ -53,3 +53,9 @@ When designing security into a system you design it to fit the threat model.
Our goal is not to protect top secret data but to provide a "reasonable" Our goal is not to protect top secret data but to provide a "reasonable"
level of security that would require an attacker to commit a considerable level of security that would require an attacker to commit a considerable
amount of resources to defeat. amount of resources to defeat.
## Network Ports
For configuring network rules to support Consul, please see [Ports Used](/docs/agent/options.html#ports)
for a listing of network ports used by Consul and details about which features
they are used for.