I have a VM which is used as a management endpoint for my service fabric cluster which will be connected through an internal load balancer. My VM will also be connected through a devops server. Considering all these which ports in my inbound rules within my NSG would need to be open?