Distributed Monitoring - Firewall settings

Hello everyone,

I would like to create an Icinga in the high availability variant.
Do I have to set/allow port forwarding for both “master servers”?
Do both servers have to be forwarded to port 5665?

I load balance 2 master nodes and I forward port 443 & 5665 AFAIK the masters communicate also on 5665.