{"id":"aks-custom-vnet-nsg-ports-443-4443-9988","text":"Custom VNet NSG rules for AKS must allow TCP 443 and 4443 from cluster subnet to API server subnet, and TCP 9988 from Azure Load Balancer to API server subnet.","truth_value":"IN","source":"entries/2026/03/10/aks-networking.md","source_url":"","source_hash":"ee1b8af5cbdfad92","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"aks-custom-vnet-nsg-ports-443-4443-9988","truth_value":"IN","reason":"premise"}]}}