port	protocol	bind_scope	allowed_sources	purpose
8081	tcp	10.2.203.115,node-ip	business-net	front HTTP
8443	tcp	10.2.203.115,node-ip	business-net	future HTTPS
1883	tcp	10.2.203.116,node-ip	device-and-app-net	MQTT proxy
8083	tcp	10.2.203.116,node-ip	device-and-app-net	MQTT WebSocket proxy
3306	tcp	10.2.203.117,node-ip	app-nodes	MySQL5.6 proxy
3308	tcp	10.2.203.117,node-ip	inventory-app	MySQL8.0 proxy
6379	tcp	10.2.203.117,node-ip	app-nodes	Redis5 proxy
6387	tcp	10.2.203.117,node-ip	inventory-app	Redis7 proxy
26379	tcp	node-ip	redis01,redis02,nginx02	Redis5 Sentinel on nginx02 only
26387	tcp	node-ip	redis01,redis02,nginx02	Redis7 Sentinel on nginx02 only
3000	tcp	node-ip	management-and-control	Orchestrator API
10008	tcp	node-ip	nginx01,nginx02,redis01	Orchestrator Raft