---
title: What do I need to run Kiali in a private cluster?
weight: 60
---
:icons: font
:sectlinks:
:linkattrs:

Private clusters have higher network restrictions. Kiali needs your cluster to allow `TCP` traffic between the Kubernetes API service and the Istio Control Plane namespace, for both the `8080` and `15000` ports. This is required for features such as Health and Envoy Dump to work as expected.

Make sure that the firewalls in your cluster allow the connections mentioned above.

Check section Google Kubernetes Engine (GKE) Private Cluster requirements in the link:../installation-guide/#_google_cloud_private_cluster_requirements[Installation Guide, window="_blank"].

icon:bullhorn[size=1x]{nbsp} Open an https://github.com/kiali/kiali/issues/new/choose[issue, window="_blank"] if you have a private cluster with a different provider than GKE. We'll try to accommodate your scenario and document it for future users.
