// Module included in the following assemblies:
//
// * installing/installing_vsphere/ipi/ipi-vsphere-installation-reqs.adoc

:_mod-docs-content-type: CONCEPT
[id="installation-vsphere-installer-network-requirements_{context}"]
= Network connectivity requirements

[role="_abstract"]
You must configure the network connectivity between machines to allow {product-title} cluster components to communicate.

Review the following details about the required network ports.

.Ports used for all-machine to all-machine communications
[cols="2a,2a,5a",options="header"]
|===

|Protocol
|Port
|Description

|VRRP
|N/A
|Required for keepalived

|ICMP
|N/A
|Network reachability tests

.3+|TCP
|`1936`
|Metrics

|`9000`-`9999`
|Host level services, including the node exporter on ports `9100`-`9101` and
the Cluster Version Operator on port `9099`.

|`10250`-`10259`
|The default ports that Kubernetes reserves

.5+|UDP

|`6081`
|Geneve

|`9000`-`9999`
|Host level services, including the node exporter on ports `9100`-`9101`.

|`500`
|IPsec IKE packets

|`4500`
|IPsec NAT-T packets

|TCP/UDP
|`30000`-`32767`
|Kubernetes node port

|ESP
|N/A
|IPsec Encapsulating Security Payload (ESP)

|===

.Ports used for all-machine to control plane communications
[cols="2a,2a,5a",options="header"]
|===

|Protocol
|Port
|Description

|TCP
|`6443`
|Kubernetes API

|===

.Ports used for control plane machine to control plane machine communications
[cols="2a,2a,5a",options="header"]
|===

|Protocol
|Port
|Description

|TCP
|`2379`-`2380`
|etcd server and peer ports

|===
