运行AWS opsworks实例所需的基本安全组端口

Question

I was trying to create some instances in aws opsworks stack. I am performing this on secured vpc. Which is not default one. That VPC have internet connection. However I have been instructed to restrict sources to required inbound ports to specific address only not to 0.0.0.0/0. Generally the ports we are using - ssh, http and https. ssh is ok to restrict to vpc subnet. but I have problem with http and httpd. I have some queries- 1. What are the minimal inbound ports required to run opsworks properly and what will be the source? Hence we are not using 0.0.0.0/0 2. Since my cookbook stored in s3 which is accessible inside vpc. what will be the minimal port required. 3. I am not using Opsworks default security group. I am trying to use other security cookbook. 4. I have seen Opsworks are using some cookbooks from github.com . If I restrict then will it fail. 5. AWS said the following http and https source should be 0.0.0.0/0. link 6. When I am restricting ec2 instances are booting up but opsworks it is showing "setting-up" does not show any log messages.

Kindly advise what are the essential inbound ports to be opened and static source required to run in production vpc.

Regards Biswajit Das

Answer 1

Chef客户端和solo通常不需要任何类型的入站端口，除了使出站TCP正常工作所需的常用临时端口外。