I can't find anything about the ports to be opened on iptables to protect a MaaS (Region and Rack controller all in one).
Anyone have tried this ?
The list of ports can be found here: Communication | MAAS documentation.
Each rack controller must be able to initiate TCP connections on the following ports:
Port(s) Description 5240 HTTP communication with each region controller. Note that port 80 is typically used in high- availability environments. See MAAS HA. 5241 - 5247 Reserved for internal MAAS services. 5248 Reserved for rack HTTP communication. 5250 - 5270 Reserved for region workers (RPC).