Port 10250 (TCP) — Kubelet API

Check if port 10250 is open

On the server, see what is listening:

sudo ss -tulpn | grep ':10250 '

From another machine, test reachability:

nc -zv your-server.example.com 10250

Block port 10250 from the internet

With UFW (Ubuntu/Debian):

sudo ufw deny 10250

With firewalld (RHEL/AlmaLinux/Rocky):

sudo firewall-cmd --permanent --remove-port=10250/tcp && sudo firewall-cmd --reload

← All common ports