diff --git a/inventory/host_vars/aarch64-c26n1-oqa.arm.fedoraproject.org b/inventory/host_vars/aarch64-c26n1-oqa.arm.fedoraproject.org
index 38fef9b1cd..91d3226c1e 100644
--- a/inventory/host_vars/aarch64-c26n1-oqa.arm.fedoraproject.org
+++ b/inventory/host_vars/aarch64-c26n1-oqa.arm.fedoraproject.org
@@ -20,6 +20,12 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 ansible_ifcfg_whitelist: ['eth0']
 
 openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/aarch64-c27n1-oqa.arm.fedoraproject.org b/inventory/host_vars/aarch64-c27n1-oqa.arm.fedoraproject.org
index b66e728243..b2c50f48b8 100644
--- a/inventory/host_vars/aarch64-c27n1-oqa.arm.fedoraproject.org
+++ b/inventory/host_vars/aarch64-c27n1-oqa.arm.fedoraproject.org
@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/aarch64-c28n1-oqa.arm.fedoraproject.org b/inventory/host_vars/aarch64-c28n1-oqa.arm.fedoraproject.org
index 1dd87ba123..2eeea12111 100644
--- a/inventory/host_vars/aarch64-c28n1-oqa.arm.fedoraproject.org
+++ b/inventory/host_vars/aarch64-c28n1-oqa.arm.fedoraproject.org
@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/aarch64-c29n1-oqa.arm.fedoraproject.org b/inventory/host_vars/aarch64-c29n1-oqa.arm.fedoraproject.org
index 67042a090d..de56fdbcd1 100644
--- a/inventory/host_vars/aarch64-c29n1-oqa.arm.fedoraproject.org
+++ b/inventory/host_vars/aarch64-c29n1-oqa.arm.fedoraproject.org
@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/aarch64-c30n1-oqa.arm.fedoraproject.org b/inventory/host_vars/aarch64-c30n1-oqa.arm.fedoraproject.org
index 330b76947e..5fad61f820 100644
--- a/inventory/host_vars/aarch64-c30n1-oqa.arm.fedoraproject.org
+++ b/inventory/host_vars/aarch64-c30n1-oqa.arm.fedoraproject.org
@@ -19,7 +19,13 @@ sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 # and leave everything else alone.
 ansible_ifcfg_whitelist: ['eth0']
 
-openqa_workers: 3
+openqa_workers: 4
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/openqa-ppc64le-01.qa.fedoraproject.org b/inventory/host_vars/openqa-ppc64le-01.qa.fedoraproject.org
index 6476e759b3..e083354bbb 100644
--- a/inventory/host_vars/openqa-ppc64le-01.qa.fedoraproject.org
+++ b/inventory/host_vars/openqa-ppc64le-01.qa.fedoraproject.org
@@ -20,6 +20,12 @@ ansible_ifcfg_whitelist: ['eth2']
 
 # this is a powerful machine, can handle more openQA workers
 openqa_workers: 8
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083']
 
 # has an HW RNG, so let's have rngd
 openqa_rngd: True
diff --git a/inventory/host_vars/qa05.qa.fedoraproject.org b/inventory/host_vars/qa05.qa.fedoraproject.org
index 5b414a03cf..1f5119a566 100644
--- a/inventory/host_vars/qa05.qa.fedoraproject.org
+++ b/inventory/host_vars/qa05.qa.fedoraproject.org
@@ -3,3 +3,10 @@ fas_client_groups: sysadmin-qa,sysadmin-main
 sudoers: "{{ private }}/files/sudo/qavirt-sudoers"
 eth0_ip: 10.5.124.155
 gw: 10.5.124.254
+
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043']
diff --git a/inventory/host_vars/qa14.qa.fedoraproject.org b/inventory/host_vars/qa14.qa.fedoraproject.org
index c85b28866e..c0c52fe5d0 100644
--- a/inventory/host_vars/qa14.qa.fedoraproject.org
+++ b/inventory/host_vars/qa14.qa.fedoraproject.org
@@ -16,3 +16,9 @@ ansible_ifcfg_whitelist: ['eth0']
 
 # this is a powerful machine, can handle more openQA workers
 openqa_workers: 10
+# firewall ports for server->worker websockets connections
+# this port is 'QEMUPORT plus 1'
+# QEMUPORT is:
+# $ENV{QEMUPORT} = ($options{instance}) * 10 + 20002;
+# so for worker 1 it's 20012, for worker 2 it's 20022, etc etc
+tcp_ports: ['20013', '20023', '20033', '20043', '20053', '20063', '20073', '20083', '20093', '20103']
diff --git a/inventory/inventory b/inventory/inventory
index 5c2a549cb0..a3f86c8723 100644
--- a/inventory/inventory
+++ b/inventory/inventory
@@ -1318,11 +1318,6 @@ qa14.qa.fedoraproject.org
 taskotron-stg01.qa.fedoraproject.org
 taskotron01.qa.fedoraproject.org
 openqa-ppc64le-01.qa.fedoraproject.org
-aarch64-c26n1-oqa.arm.fedoraproject.org
-aarch64-c27n1-oqa.arm.fedoraproject.org
-aarch64-c28n1-oqa.arm.fedoraproject.org
-aarch64-c29n1-oqa.arm.fedoraproject.org
-aarch64-c30n1-oqa.arm.fedoraproject.org
 
 [osbs-control]
 osbs-control01.phx2.fedoraproject.org