firewalld on conductor and router
The primary connection between a router and a conductor is using 930/TCP, which is an encrypted SSH connection that bears most router-to-conductor inter-process communication (IPC).
The secondary connetion is that between a router's salt-minion and a conductor's salt-master, which leverages 4505-4506/TCP.