Found the answer:

The master server polls the storage node web server. (/fog/status/bandwidth.php?dev=eth-device-name)

If the master server is HTTPS enabled, the storage nodes must expose the APIs in HTTPS too.