Private control and state interfaces are not intended to be internet-facing.
Configure
Firewall & ports
Understand the customer-facing ports used by the current deployment topology.
The current deployment topology can expose these customer-facing interfaces: