anchor.diff:  Only required to be internally open on master hosts.
   
   | *80* or *443*
  +|TCP
   | For HTTP/HTTPS use for the router. Required to be externally open on node hosts, especially on nodes running the router.
   
   | *1936*
  +|TCP
   | For router statistics use. Required to be open when running the template
   router to access statistics, and can be open externally or internally to
   connections depending on if you want the statistics to be expressed publicly.
   
   | *4001*
  +|TCP
   | For embedded etcd (non-clustered) use. Only required to be internally open on
   the master host. *4001* is for server-client connections.
   
   | *2379* and *2380*
  +|TCP
   | For standalone etcd use. Only required to be internally open on the master host.
   *2379* is for server-client connections. *2380* is for server-server
   connections, and is only required if you have clustered etcd.
   
   | *4789*
  +|UDP
   | For VxLAN use ({product-title} SDN). Required only internally on node hosts.
   
   | *8443*
  +|TCP
   | For use by the {product-title} web console, shared with the API server.
   
   | *10250*
  +|TCP
   | For use by the Kubelet. Required to be externally open on nodes.
   
   | *24224*
  +|TCP/UDP
   | For use by Fluentd. Required to be open on master hosts for internal
   connections to node hosts.
   |===
  
positive.code: ====
  
  .Master to Master
  [cols='2,8']
  |===
  | *53 (L)* or *8053* (L)
  |Required for DNS resolution of cluster services (SkyDNS).
  ifdef::openshift-origin[]
  Installations prior to 1.2 or environments upgraded to 1.2 use port 53.
  
negative.code: New installations will use 8053 by default so that *dnsmasq* may be configured.
  
  | *4789*
  |UDP
  |Required for SDN communication between pods on separate hosts.
  
  | *443* or *8443*
  |TCP
  |Required for node hosts to communicate to the master API, for the node hosts to
  post back status, to receive tasks, and so on.
  |===
  
  .Master to Node
  [cols='2,1,8']
  |===
  | *4789*
  |UDP
  |Required for SDN communication between pods on separate hosts.
  
  | *10250*
  |TCP
  |The master proxies to node hosts via the Kubelet for `oc` commands.
  |===
  
  