The 2022 IT Salary & Skills Survey is now open, and you can participate!<\/strong> <\/span><\/p>

This survey is one of the largest studies of IT salary, skills, and certifications. It\u2019s the backbone of Skillsoft\u2019s annual IT Skills and Salary Report, which shares detailed insights on skills and certifications, compensation, skills gaps and challenges, and more for IT professionals at every stage of their career.<\/span><\/p>

The survey typically takes 10-15 minutes to complete. You can bookmark your progress and pick up where you left off within one week of starting the survey. It\u2019s also completely anonymous. Skillsoft doesn\u2019t sell the data or share it with others.\u00a0<\/p>

Participating in the survey is a great way to share how Nutanix certification and training has impacted your career. <\/span>Plus, anyone who completes the survey can enter to win a $100 gift card! <\/em><\/p>

Take the survey today!<\/strong><\/a><\/h3>

\u00a0<\/p>

This article was written by Karlie Beil, Customer Marketing Specialist.\u00a0<\/p><\/div><\/div><\/div><\/div><\/div><\/section>

\u00a0<\/p>

\u00a9\ufe0f\ufe0f\ufe0f\ufe0f\ufe0f\ufe0f 2022 Nutanix, Inc. \u00a0All rights reserved. Nutanix, the Nutanix logo and all Nutanix product, feature and service names mentioned herein are registered trademarks or trademarks of Nutanix, Inc. in the United States and other countries. Other brand names mentioned herein are for identification purposes only and may be the trademarks of their respective holder(s). This post may contain links to external websites that are not part of Nutanix.com. Nutanix does not control these sites and disclaims all responsibility for the content or accuracy of any external site. Our decision to link to an external site should not be considered an endorsement of any content on such a site. This post may contain express and implied forward-looking statements, which are not historical facts and are instead based on our current expectations, estimates and beliefs. The accuracy of such statements involves risks and uncertainties and depends upon future events, including those that may be beyond our control, and actual results may differ materially and adversely from those anticipated or implied by such statements. Any forward-looking statements included herein speak only as of the date hereof and, except as required by law, we assume no obligation to update or otherwise revise any of such forward-looking statements to reflect subsequent events or circumstances.<\/p>","id":40862,"featuredImage":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/attachment\/1b5db37d-c54b-4002-8bee-065c799897b2_thumb.png","label":"Blog","replyCount":0,"views":152,"post":{"id":61075,"author":{"id":113632,"url":"\/members\/karlie-beil-113632","name":"Karlie Beil","avatar":"https:\/\/uploads-us-west-2.insided.com\/nutanix-us\/icon\/200x200\/1581aab3-bcf6-49f4-b2fb-3d11e8c010dc.png","userTitle":"Community Manager","rank":{"isBold":false,"isItalic":false,"isUnderline":false,"name":"Community Manager","color":"#0873ba"},"userLevel":2},"content":"

The 2022 IT Salary & Skills Survey is now open, and you can participate!<\/strong> <\/span><\/p>

This survey is one of the largest studies of IT salary, skills, and certifications. It\u2019s the backbone of Skillsoft\u2019s annual IT Skills and Salary Report, which shares detailed insights on skills and certifications, compensation, skills gaps and challenges, and more for IT professionals at every stage of their career.<\/span><\/p>

The survey typically takes 10-15 minutes to complete. You can bookmark your progress and pick up where you left off within one week of starting the survey. It\u2019s also completely anonymous. Skillsoft doesn\u2019t sell the data or share it with others.\u00a0<\/p>

Participating in the survey is a great way to share how Nutanix certification and training has impacted your career. <\/span>Plus, anyone who completes the survey can enter to win a $100 gift card! <\/em><\/p>

Take the survey today!<\/strong><\/a><\/h3>

\u00a0<\/p>

This article was written by Karlie Beil, Customer Marketing Specialist.\u00a0<\/p><\/div><\/div><\/div><\/div><\/div><\/section>

\u00a0<\/p>

\u00a9\ufe0f\ufe0f\ufe0f\ufe0f\ufe0f\ufe0f 2022 Nutanix, Inc. \u00a0All rights reserved. Nutanix, the Nutanix logo and all Nutanix product, feature and service names mentioned herein are registered trademarks or trademarks of Nutanix, Inc. in the United States and other countries. Other brand names mentioned herein are for identification purposes only and may be the trademarks of their respective holder(s). This post may contain links to external websites that are not part of Nutanix.com. Nutanix does not control these sites and disclaims all responsibility for the content or accuracy of any external site. Our decision to link to an external site should not be considered an endorsement of any content on such a site. This post may contain express and implied forward-looking statements, which are not historical facts and are instead based on our current expectations, estimates and beliefs. The accuracy of such statements involves risks and uncertainties and depends upon future events, including those that may be beyond our control, and actual results may differ materially and adversely from those anticipated or implied by such statements. Any forward-looking statements included herein speak only as of the date hereof and, except as required by law, we assume no obligation to update or otherwise revise any of such forward-looking statements to reflect subsequent events or circumstances.<\/p>","url":"\/education-blog-153\/add-your-voice-to-the-it-skills-and-salary-survey-40862?postid=61075#post61075","creationDate":"2022-05-12T20:00:15+0000","relativeCreationDate":"28 days ago"},"contentType":"article","type":3,"likes":0,"hasCurrentUserLiked":false},"phrases":{"Forum":{"{n} year|{n} years":"{n} year|{n} years","{n} month|{n} months":"{n} month|{n} months","{n} day|{n} days":"{n} day|{n} days","{n} hour|{n} hours":"{n} hour|{n} hours","{n} minute|{n} minutes":"{n} minute|{n} minutes","just":"just now","{plural} ago":"{plural} ago"}}}">

问题

需要访问和工具的端口

t
徽章 +2
不确定为什么，但是似乎没有与所需端口有关的文档，这些端口可能需要在防火墙中打开以访问CVM。也许Nutanix认为组织不会将防火墙从集群中脱颖而出，以保护恶意用户的访问权限。如果我错了，为什么我不看到访问CVM所需的端口列表，而不是显示外围防火墙中需要哪些外向端口的KB文章？

为了正确保护群集，CVM应该坐在防火墙后面，在我的建筑中，在我们与任何东西一起生活之前，情况就是这种情况。

为了使Admins通过防火墙TCP 22访问CVM，需要80和9440来访问Web控制台。

这是吗？还是有更多的端口需要开放各种类型的管理员交互？

  • 如何对群集运行CLI工具？
  • 如何下载支持文件？

而且我确定我在这里错过了更多。

我确实看到有一个尝试缩小此差距的尝试：https://vmwaremine.com/2014/09/19/nutanix-network-port-diagram/#sthash.dercc2j9.dpbs

但是，当您查看此资源的图表时，我会看到一个没有任何解释的大量端口列表，在某些情况下，我会看到Nutanix未记录的其他端口。在这里是：TCP（22,2009,2010,2030
2100,2222,8000,9440）
UDP（13000）
\n
\nIn order to properly protect a cluster the CVMs should sit behind a firewall, which in my architecture this will be the case before we go live with anything.
\n
\nIn order for admins to access the CVMs through a firewall TCP 22 is needed for SSH, and 80 and 9440 are needed for accessing the web console.
\n
\nIs this is? or are there more ports that would need to be opened up for the various types of admin interactions?
\n
\n
该主题已关闭以供评论

7个答复

理查德·波特罗
秩
UserLevel 3
徽章 +5
你好 @Thegman

有关于防火墙要求的文档：https://portal.nutanix.com/#/page/docs/details?targetId=acropolis-upgrade-guide-guide-v511:wc-support-firewall-wc-c.html

但是所有这些端口都是从CVM到外部网络，例如下载1键和LCM升级捆绑包，将脉冲数据发送到Nutanix等。

从不同的网络到CVM，为了管理目的，您可能必须打开22（SSH）和9440（PRISM），这肯定是最常用的管理接口。

但是请记住，您可能需要为IPMI（例如443（HTTPS）和5900（控制台））打开其他端口，并且还有许多其他端口，例如2009年（Stargate Page），8000（基础页面），2222（Founction），2222（SFTP），2010年（策展人页面）...但是在大多数情况下，一旦支持访问CVM SSH，我们就会使用CVM上的链接工具来访问Stargate，策展人和其他诊断页面本地。
Richardson Porto -LinkedIn：http：//linkedin.com/in/richardsonporto
@theGman<\/user-mention>
\n
\nThere is a documentation talking about firewall requirements: https:\/\/portal.nutanix.com\/#\/page\/docs\/details?targetId=Acropolis-Upgrade-Guide-v511:wc-support-firewall-wc-c.html<\/a>
\n
\nBut all these ports are from CVM to external networks, like for instance to download 1-Click and LCM upgrade bundles, send Pulse data to Nutanix and so on.
\n
\nFrom different network to CVMs, for management purpose, you may have to open 22 (SSH) and 9440 (Prism), which for sure are the most used management interfaces.
\n
\nBut keep in mind that you will may need to open additional ports also for IPMI like 443 (HTTPS) and 5900 (console) and there are also many other ports to CVM like 2009 (Stargate page), 8000 (Foundation page), 2222 (SFTP), 2010 (Curator page)... but in most of the cases once support access the CVM SSH, we use the links tools on CVM to access the Stargate, Curator and other diagnostic pages locally.","quoteUsername":"RichardsonPorto","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
t
徽章 +2
嗨，理查德 - 我已经看到了您已经提出的KB，它说明了以下内容：

“使用这些防火墙要求在外部防火墙中配置规则，以允许Nutanix远程支持，脉冲，SMTP，1键升级和LCM更新。”

我正在寻找文档，该文档显示了产品使用的所有端口的完整列表，而不是基于特定服务的子集。
\n
\n\"Use these firewall requirements to configure rules in your external firewall to allow Nutanix Remote Support, Pulse, SMTP, 1-click upgrades, and LCM updates.\"
\n
\nI am looking for the documentation that shows the complete listing of all ports in use by the product and not a subset based on specific services.","quoteUsername":"theGman","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
t
徽章 +2
请注意，我将没有得到答案的问题，直到我看到Nutanix CVM所使用的所有端口的良好文档，包括传入和传出详细信息。对Nutanix工程没有冒犯，但我厌倦了厌倦了碎片文档，这些文档散布在供应商那里，这些供应商在销售产品的销售方面使工程师和建筑师不断寻找所需的细节，这些产品不断寻找他们寻求，经常出现。
阿罗纳
秩
UserLevel 6
徽章 +5
你好 @Thegman，我们认识到与文档有关的有改进的余地。请检查下面的帖子，让我知道是否会让您更接近所寻求的信息。请分享您的建议，因为它们可以帮助我们改善文档。

没有太多的安全层 - nutanix网络端口
@theGman<\/user-mention>, we recognize there is room for improvement in relation to documentation. Please check the post below and let me know if that brings you any closer to the sought after information. Please share your suggestions as they helps us improve documentation.
\n
\nThere is no such thing as too many layers of security - Nutanix network ports<\/a>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">
阿罗纳
秩
UserLevel 6
徽章 +5

我知道这不是您想要的，但我遇到了这个，以为您可能会发现它有用

https://portal.nutanix.com/#/page/docs/details?targetId=field-Iffield-iffield-installation-guide-v4-5:set-network-reqs-c.html#concept_1mm_xwq_nh

杰里米
秩
UserLevel 3
徽章 +4

你好thegman，

*应该 *涵盖的主要文件是安全指南。那里的链接指向防火墙建议。

如果您认为那里缺少某些东西，请澄清。我可以与文档团队和安全团队一起工作，以缩小差距。

还有这篇文章“用于CVM通信的端口号”列出了CVM上哪些端口的服务。这些并不需要向外部开放，其中许多绝对不应该是，因此我只提到KB作为知识参考。如我之前所指出的，应在安全指南中使用防火墙规则要求，因此，如果缺少任何内容，我们可以在该文档中解决它。

我认为在撰写文档时，人们期望Prism访问来自公司网络。

你提到

SSH需要TCP 22，访问Web控制台需要80和9440。

这是吗？还是有更多的端口需要开放各种类型的管理员交互？

  • 如何对群集运行CLI工具？
  • 如何下载支持文件？


我认为您已涵盖了管理员访问权限。CLI工具（例如NCLI）使用Nutanix REST API，它需要端口9440。SSH需要端口22，对于本地收集文件，我通常建议使用同一端口的SCP。还可以选择使用CVM上的logBay通过SFTP导出日志，在这里再次使用端口22。

I could think of various other scenarios, such as remote access to the Nutanix containers to upload files, or remote iSCSI access, but if you don’t mind please let me know what scenarios I’ve missed and what’s not covered in the security guide and let’s see if I can’t get the security guide to cover it.

hello theGman,<\/p>

The primary document that *should* cover this is the Security Guide<\/a>. The link there goes to the firewall recommendations.\u00a0<\/p>

If you think something is missing there, please clarify. I can work with the documentation team, and security team\u00a0if necessary, to close the gap.\u00a0<\/p>

There is also this article \u201cPort numbers used for inter CVM communication<\/a>\u201d which lists what services on the CVM use which ports. These do not all need to be open to the outside, many of them definitely should not be, so I only mention the KB as a knowledge reference. The firewall rules requirements, with explanation, should be in the security guide as I indicated earlier so if anything is missing there we can address it in that document.\u00a0

I think in writing the documentation, there is an expectation that Prism access would be from within the corporate network.

You mentioned\u00a0<\/p>

TCP 22 is needed for SSH, and 80 and 9440 are needed for accessing the web console.\u00a0

Is this is? or are there more ports that would need to be opened up for the various types of admin interactions?\u00a0
\u00a0<\/p>

m

你好thegman，

*应该 *涵盖的主要文件是安全指南。那里的链接指向防火墙建议。

如果您认为那里缺少某些东西，请澄清。我可以与文档团队和安全团队一起工作，以缩小差距。

还有这篇文章“用于CVM通信的端口号”列出了CVM上哪些端口的服务。这些并不需要向外部开放，其中许多绝对不应该是，因此我只提到KB作为知识参考。如我之前所指出的，应在安全指南中使用防火墙规则要求，因此，如果缺少任何内容，我们可以在该文档中解决它。

我认为在撰写文档时，人们期望Prism访问来自公司网络。

你提到

SSH需要TCP 22，访问Web控制台需要80和9440。

这是吗？还是有更多的端口需要开放各种类型的管理员交互？

  • 如何对群集运行CLI工具？
  • 如何下载支持文件？


我认为您已涵盖了管理员访问权限。CLI工具（例如NCLI）使用Nutanix REST API，它需要端口9440。SSH需要端口22，对于本地收集文件，我通常建议使用同一端口的SCP。还可以选择使用CVM上的logBay通过SFTP导出日志，在这里再次使用端口22。

I could think of various other scenarios, such as remote access to the Nutanix containers to upload files, or remote iSCSI access, but if you don’t mind please let me know what scenarios I’ve missed and what’s not covered in the security guide and let’s see if I can’t get the security guide to cover it.

嗨，我只是遇到了这个问题，并且遇到了同样的问题。您上面列出的文档显示了从我的网络中访问Nutanix进行下载和支持所需的内容。

缺少的是我需要打开的防火墙端口来管理用户与硬件通过防火墙分离时。

例如，

作为管理员，我需要进入ILO IP并登录。这只需要端口443吗？

\t

hello theGman,<\/p>\t

The primary document that *should* cover this is the Security Guide<\/a>. The link there goes to the firewall recommendations.\u00a0<\/p>\t

If you think something is missing there, please clarify. I can work with the documentation team, and security team\u00a0if necessary, to close the gap.\u00a0<\/p>\t

There is also this article \u201cPort numbers used for inter CVM communication<\/a>\u201d which lists what services on the CVM use which ports. These do not all need to be open to the outside, many of them definitely should not be, so I only mention the KB as a knowledge reference. The firewall rules requirements, with explanation, should be in the security guide as I indicated earlier so if anything is missing there we can address it in that document.\u00a0

\tI think in writing the documentation, there is an expectation that Prism access would be from within the corporate network.

\tYou mentioned\u00a0<\/p>\t

\t

TCP 22 is needed for SSH, and 80 and 9440 are needed for accessing the web console.\u00a0

\tIs this is? or are there more ports that would need to be opened up for the various types of admin interactions?\u00a0
\t\u00a0<\/p>\t

Learn more about our cookies.<\/a>","cookiepolicy.button":"Accept cookies","cookiepolicy.button.deny":"Deny all","cookiepolicy.link":"Cookie settings","cookiepolicy.modal.title":"Cookie settings","cookiepolicy.modal.content":"We use 3 different kinds of cookies. You can choose which cookies you want to accept. We need basic cookies to make this site work, therefore these are the minimum you can select. Learn more about our cookies.<\/a>","cookiepolicy.modal.level1":"Basic
Functional","cookiepolicy.modal.level2":"Normal
Functional + analytics","cookiepolicy.modal.level3":"Complete
Functional + analytics + social media + embedded videos"}}}">

Baidu