SharePoint 2016 Ports and Protocols

The ports haven't changed. You can use that diagram to divide DC+WFE, App+Search, or however you need to modify it. The clear changes are UPSS is no longer part of the equasion, and the Sandbox Service runs on the WFE role (or DC+WFE).

Here is a complete list of where services reside, although this was based off of RTM.

http://blog.robgarrett.com/2015/12/28/sharepoint-2016-minrole-services-list/

Lastly, don't forget Microsoft's own documentation.

https://technet.microsoft.com/en-us/library/cc262849(v=office.16).aspx