You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+32Lines changed: 32 additions & 0 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -39,6 +39,38 @@ This module is a replacement for the [puppet_metrics_dashboard module](https://f
39
39
40
40
## Setup
41
41
42
+
### Firewall Requirements for Puppet Operational Dashboards
43
+
44
+
To ensure smooth communication between services in the Puppet Operational Dashboards module, the following firewall rules must be configured in addition to those required by Puppet Enterprise:
45
+
46
+
| Application | Port | Protocol | Communication Flow | Deployment Notes |
|**Telegraf**| 8086 | TCP | Outbound to InfluxDB | Connects to InfluxDB for metric collection. |
49
+
|**InfluxDB**| 8086 | TCP | Inbound from Telegraf,Grafana | Receives metrics from Telegraf and Grafana. |
50
+
|**Grafana**| 3000 | TCP | Inbound from users/browsers | Used for accessing the dashboard interface. |
51
+
|**PostgreSQL**| 5432 | TCP | Inbound from applications | Required for metrics collection in both Puppet Enterprise and Open Source setups. |
52
+
|**Puppetserver**| 8140 | TCP | Inbound from inbound from telegraf | Standard Puppetserver communication. |
53
+
|**PuppetDB**| 8081 | TCP | Inbound from Telegraf | Stores and serves reports, catalogs, and exported resources. |
54
+
|**Orchestrator**| 8143 | TCP | Inbound from Telegraf | Manages task execution and orchestrates Puppet runs. |
55
+
56
+
57
+
---
58
+
59
+
#### Deployment Scenario: Puppet Enterprise with Firewalls Between Components
60
+
61
+
In a Puppet Enterprise deployment with Puppet compilers and firewalls between the primary server, compilers, and infrastructure hosting the services deployed by this module, additional considerations must be addressed:
62
+
63
+
1.**Primary Server to Infrastructure Services (Telegraf, InfluxDB, Grafana)**:
64
+
- Ports: `8086` (InfluxDB), `3000` (Grafana))
65
+
- Protocol: TCP
66
+
- Purpose: Allow the primary server to send metrics and manage dashboards via Grafana and InfluxDB.
67
+
68
+
2.**Puppet Compilers to Infrastructure Services**:
69
+
- Ports: `8086` (InfluxDB), `5432` (PostgreSQL)
70
+
- Protocol: TCP
71
+
- Purpose: Enable Puppet compilers to report metrics collected by Telegraf.
0 commit comments