Web interface: 8006 (TCP, HTTP/1.1 over TLS)

VNC Web console: 5900-5999 (TCP, WebSocket)

SPICE proxy: 3128 (TCP)

sshd (used for cluster actions): 22 (TCP)

rpcbind: 111 (UDP)

sendmail: 25 (TCP, outgoing)

corosync cluster traffic: 5404, 5405 UDP

live migration (VM memory and local-disk data): 60000-60050 (TCP)