Security hardening for ZStack Cloud

Applicable scenario

• Product: ZCF
• Component: Cloud
• Versions: 4.8.x, 4.5.x
• Deployment topology: dual management nodes
• Trigger: Multiple sensitive ports require access restrictions to meet vulnerability-scan remediation requirements.

Symptoms

• Multiple common service ports are externally exposed.
• These ports must be limited to cluster-internal access.
• Ports 22 and 5000 must also allow specified PC access.

Determination method

1. Before the change, confirm platform health and resource connection state.