The Replicated installer script accepts a number of flags that can be used to modify the behavior of the TFE installation. The disable-replicated-host-networking flag can be passed to disable exposing most Replicated ports on the host network, excluding the Replicated UI, Replicated Registry, and Graphite ports. Disabling this ports can be useful for security-sensitive installations that need to minimize their network footprint.
The flag can be set using the following command on the TFE host:
$ ./install.sh disable-replicated-host-networking <... additional flags ...>
Please see Replicated’s installing via script documentation for full details.