You would need a range large enough to at least let all nodes connect to one
another; I don't know exactly how the port allocation work for Erlang
distribution but you could experiment with range sizes starting from the number
of Erlang nodes, plus some extra to allow riak-admin and riak command
Operating under the assumption that the local network may be hostile, for
communications between the nodes of the cluster I would like to use IPsec
PSK restrictioned access and encryption to restrict cluster communications
to members of the cluster. Per
http://wiki.basho.com/Network-Security-and-Fi