Should the network ports 443 and 8443 be opened for bi-directional communication?

[kohei-saito]

Hi,

I've checked the following document.

Cluster node ports

In this document, I have a question about the ports 443 and 8443 of Dynatrace Server.

According to that, 443 is used for outbound communication to Mission Control and bidirectional communication with Dynatrace web user-interface.

In addition, 8443 is used for bidirectional communication with ActiveGate/OneAgent(when without AG).

Is my understanding correct?

Kohei

[krzysztof_szynt · Accepted solution]

Hi,

Dynatrace Managed node needs 443 (inbound) for UI traffic (coming from the browser) and 8443 for monitoring traffic (coming from the agents or private/public managed gateways). Here your understanding is correct.

The other port 443 from your question is a MissionControl port. MissionControl is in the cloud and the cluster connects to it, so it needs outbound connectivity on that port. Not necessarily direct connectivity, it can be via configured proxy. It can also be restricted only to MC public IP address. But it needs to be able to reach https://mcsvc.dynatrace.com

Inbound and outbound connectivity are two separate things.

hope this help,
Krzysztof