# Rancher ufw rules

**URL:** https://forums.suse.com/t/rancher-ufw-rules/12640
**Category:** General
**Created:** [December 7, 2018, 1:14pm UTC](https://forums.suse.com/t/rancher-ufw-rules/12640 "2018-12-07T13:14:28Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![neo1](https://avatars.discourse-cdn.com/v4/letter/n/b9bd4f/32.png) [@neo1](https://forums.suse.com/u/neo1)
#### Post date: [December 7, 2018, 1:14pm UTC](https://forums.suse.com/t/rancher-ufw-rules/12640/1 "2018-12-07T13:14:28Z")

</div>

I wonder if there is a set of UFW that currently works with Rancher 2.1.3 server and agent nodes? I tried to open the ports on [https://rancher.com/docs/rancher/v2.x/en/installation/references/](https://rancher.com/docs/rancher/v2.x/en/installation/references/) but the Rancher is still having diffculty provisioning the nodes.

---

<div class="post-metadata">

### Author: ![neo1](https://avatars.discourse-cdn.com/v4/letter/n/b9bd4f/32.png) [@neo1](https://forums.suse.com/u/neo1)
#### Post date: [December 12, 2018, 2:17pm UTC](https://forums.suse.com/t/rancher-ufw-rules/12640/2 "2018-12-12T14:17:28Z")

</div>

I managed to install a cluster with master and 2 workers all using UFW with these rules:

```auto
sudo ufw default deny incoming
sudo ufw default allow outgoing
sudo ufw allow from 1.2.3.4 comment "rancher server"
sudo ufw allow from 172.17.0.0/16 comment "Docker bridge network"
sudo ufw allow 6443 comment "rancher control plane nodes"

```
