Skip to content

Commit b5796e7

Browse files
authored
Merge pull request #227 from MartyEwings/main
Update to include firewall data
2 parents 33adce1 + e95dccc commit b5796e7

File tree

1 file changed

+32
-0
lines changed

1 file changed

+32
-0
lines changed

README.md

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -39,6 +39,38 @@ This module is a replacement for the [puppet_metrics_dashboard module](https://f
3939

4040
## Setup
4141

42+
### Firewall Requirements for Puppet Operational Dashboards
43+
44+
To ensure smooth communication between services in the Puppet Operational Dashboards module, the following firewall rules must be configured in addition to those required by Puppet Enterprise:
45+
46+
| Application | Port | Protocol | Communication Flow | Deployment Notes |
47+
|------------------|-------|----------|---------------------------------|--------------------------------------------------------------------|
48+
| **Telegraf** | 8086 | TCP | Outbound to InfluxDB | Connects to InfluxDB for metric collection. |
49+
| **InfluxDB** | 8086 | TCP | Inbound from Telegraf,Grafana | Receives metrics from Telegraf and Grafana. |
50+
| **Grafana** | 3000 | TCP | Inbound from users/browsers | Used for accessing the dashboard interface. |
51+
| **PostgreSQL** | 5432 | TCP | Inbound from applications | Required for metrics collection in both Puppet Enterprise and Open Source setups. |
52+
| **Puppetserver** | 8140 | TCP | Inbound from inbound from telegraf | Standard Puppetserver communication. |
53+
| **PuppetDB** | 8081 | TCP | Inbound from Telegraf | Stores and serves reports, catalogs, and exported resources. |
54+
| **Orchestrator** | 8143 | TCP | Inbound from Telegraf | Manages task execution and orchestrates Puppet runs. |
55+
56+
57+
---
58+
59+
#### Deployment Scenario: Puppet Enterprise with Firewalls Between Components
60+
61+
In a Puppet Enterprise deployment with Puppet compilers and firewalls between the primary server, compilers, and infrastructure hosting the services deployed by this module, additional considerations must be addressed:
62+
63+
1. **Primary Server to Infrastructure Services (Telegraf, InfluxDB, Grafana)**:
64+
- Ports: `8086` (InfluxDB), `3000` (Grafana))
65+
- Protocol: TCP
66+
- Purpose: Allow the primary server to send metrics and manage dashboards via Grafana and InfluxDB.
67+
68+
2. **Puppet Compilers to Infrastructure Services**:
69+
- Ports: `8086` (InfluxDB), `5432` (PostgreSQL)
70+
- Protocol: TCP
71+
- Purpose: Enable Puppet compilers to report metrics collected by Telegraf.
72+
73+
4274
### Prerequisites
4375

4476
### Note on air-gapped environments

0 commit comments

Comments
 (0)