I want to send data from a process running on toolforge to a VPS host.  I tried the obvious:

On the VPS host (puppet-test.spi-tools.eqiad1.wikimedia.cloud):
$ nc -4 -l  -p 23001

On tools-sgebastion-11:
echo foo | nc  -v -4  puppet-test.spi-tools.eqiad1.wikimedia.cloud 23001
nc: connect to puppet-test.spi-tools.eqiad1.wikimedia.cloud port 23001 (tcp) failed: Connection timed out

I'm assuming I need to configure a security group in horizon to allow ingress on that port, is that correct?