{"id":"aks-custom-vnet-nsg-required-ports","text":"Custom VNet NSGs for AKS must allow TCP 443/4443 from cluster subnet to API server subnet, and TCP 9988 from Azure Load Balancer to API server subnet.","truth_value":"IN","source":"entries/2026/03/11/aks-networking.md","source_url":"","source_hash":"84d67eb57a4b5c58","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"aks-custom-vnet-nsg-required-ports","truth_value":"IN","reason":"premise"}]}}