anchor.diff:  New installations will use 8053 by default so that *dnsmasq* may be configured.
   
   | *2049* (L)
  +|TCP/UDP
   |Required when provisioning an NFS host as part of the installer.
   
   | *2379*
  +|TCP
   |Used for standalone etcd (clustered) to accept changes in state.
   
   | *2380*
  +|TCP
   |etcd requires this port be open between masters for leader election and peering
   connections when using standalone etcd (clustered).
   
   | *4001 (L)*
  +|TCP
   |Used for embedded etcd (non-clustered) to accept changes in state.
   
   | *4789 (L)*
  +|UDP
   |Required for SDN communication between pods on separate hosts.
   
  +|===
  +
  +.External to Load Balancer
  +[cols='2,1,8']
  +|===
   | *9000*
  +|TCP
   |If you choose the `*native*` HA method, optional to allow access to the HAProxy statistics page.
   
  -
  -|===
  +|===
  +
   
   .External to Master
  -[cols='2,8']
  +[cols='2,1,8']
   |===
   | *443* or *8443*
  +|TCP
   |Required for node hosts to communicate to the master API, for node hosts to
   post back status, to receive tasks, and so on.
   |===
   
   .IaaS Deployments
  -[cols='2,8']
  +[cols='2,1,8']
   |===
   | *22*
  +|TCP
   | Required for SSH by the installer or system administrator.
   
   | *53* or *8053*
  +|TCP/UDP
   |Required for DNS resolution of cluster services (SkyDNS).
   ifdef::openshift-origin[]
   Installations prior to 1.2 or environments upgraded to 1.2 use port 53.
  
positive.code: Some ports are optional depending on your configuration and usage.
  
  .Node to Node
  [cols='2,8']
  |===
  | *4789*
  |Required for SDN communication between pods on separate hosts.
  |===
  
  .Nodes to Master
  [cols='2,8']
  |===
  | *53* or *8053*
  |Required for DNS resolution of cluster services (SkyDNS).
  ifdef::openshift-origin[]
  Installations prior to 1.2 or environments upgraded to 1.2 use port 53.
  
negative.code: New installations will use 8053 by default so that *dnsmasq* may be configured.
  
  | *4789*
  |UDP
  |Required for SDN communication between pods on separate hosts.
  
  | *443* or *8443*
  |TCP
  |Required for node hosts to communicate to the master API, for the node hosts to
  post back status, to receive tasks, and so on.
  |===
  
  .Master to Node
  [cols='2,1,8']
  |===
  | *4789*
  |UDP
  |Required for SDN communication between pods on separate hosts.
  
  | *10250*
  |TCP
  |The master proxies to node hosts via the Kubelet for `oc` commands.
  |===
  
  