Failsafe rules

By default, Calico keeps the following ports open on all host endpoints:

note

Removing the outbound failsafe rules can leave Felix unable to connect to etcd.