From e43582b0f49331999075ed1ba5931c2a0ae946f9 Mon Sep 17 00:00:00 2001
From: Håkon Hallingstad <hakon@oath.com>
Date: Fri, 5 Oct 2018 14:58:35 +0200
Subject: Trust ports 443 and 4080 on proxies

---
 .../main/java/com/yahoo/vespa/hosted/provision/NodeRepository.java    | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'node-repository')

diff --git a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/NodeRepository.java b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/NodeRepository.java
index e03250e7934..cef913b18ae 100644
--- a/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/NodeRepository.java
+++ b/node-repository/src/main/java/com/yahoo/vespa/hosted/provision/NodeRepository.java
@@ -214,7 +214,9 @@ public class NodeRepository extends AbstractComponent {
                 break;
 
             case proxy:
-                // Accept connections from the world on 4443
+                // Accept connections from the world on 443 (for dashboard app), 4080 (insecure tb removed), and 4443
+                trustedPorts.add(443);
+                trustedPorts.add(4080);
                 trustedPorts.add(4443);
                 break;
 
-- 
cgit v1.2.3