Skip to content

Commit 247d256

Browse files
authored
Correcting few typos ingress-port-opening.rst
1 parent 917d471 commit 247d256

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

advanced_topics/ingress-port-opening.rst

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,11 +9,11 @@ On some deployments you might need to manually configure ports in order to allow
99

1010
....
1111

12-
So we've modified the field ``ports_ingress_tcp`` so to read **ports_ingress_tcp = ["22", "80", "443", 7443", "9443"]**.
12+
Hence we've modified the field ``ports_ingress_tcp`` so to read **ports_ingress_tcp = ["22", "80", "443", 7443", "9443"]**.
1313

1414
To Keep in Mind
1515
~~~~~~~~~~~~~~~
16-
It is important to consider potential security risks to avoid future issues. While opening ports does put you more at risk than having none open, you are only in danger if an attack can exploit the service that is using that port. A port is not an all access pass to a cluster/network if an attacker happens upon it. Security is a complex topic indeed and can vary from case to case. Nevertheless here are some best practices for porper configuration:
16+
It is important to consider potential security risks to avoid future issues. While opening ports does put you more at risk than having none open, you are only in danger if an attack can exploit the service that is using that port. A port is not an all access pass to a cluster/network if an attacker happens upon it. Security is a complex topic indeed and can vary from case to case. Nevertheless here are some best practices for a proper configuration:
1717

1818
- **Block by default**: block all traffic by default and explicitly allow only specific traffic to known services. This strategy provides good control over the traffic and reduces the possibility of a breach because of service misconfiguration.
1919

0 commit comments

Comments
 (0)