Documentation for self-hosting for port requirements

[MatthewJohn]

Is your feature request related to a problem? Please describe.

The documentation for self-hosting (https://docs.netbird.io/selfhosted/selfhosted-quickstart) states that:

The VM should be publicly accessible on TCP ports 80, 443, 33073, 10000 and 33080; and UDP ports: 3478, 49152-65535.

Describe the solution you'd like

I'd like to know in which situations these ports are used.

For instance:

• Are some ports just for management
• Are some ports required for authenticating a device?
• Is 80 really necessary to be opened, is it just for a redirect?

I'd be intereseted in the scenario:

• Management is performed via an isolated network (all of these ports can be opened in this case)
• Devices are onboarded on an internal network
• Once devices are onboarded, the user can roam (the world) and whichever ports are required from here would actually be opened to the world (or rather to certain untrusted networks)

[nazarewk]

• 80 is probably still used for certificate generation from letsencrypt
• 33073 seems to be a legacy Management port for old clients, see search
• 10000 seems to be the same for signal for old clients, see search
• 33080 seems to be a relay server port, see search
• 3478 seems to be a STUN port, see search
• 49152-65535 looks like TURN protocol port range to establish relayed connections, see search

[MatthewJohn]

Thank you 🙏

…

Sent from my iPhone