Why am I needing to open ports for Ingress to work?

After installing node red, I was seeing the following error in the system log:

Ingress error: Cannot connect to host ssl:None [Operation timed out]

So, I opened port 64286 on the host and NodeRed started to work. Why would I need to do this and how do I make it stop?