Port and network requirements
Need to open the port
For the security of the server system, we need to open only specific ports. The following are the ports that need to be opened:
Ports open to the outside world (ports required for external network access):
| port number | Port usage | protocol | open hosting |
|---|---|---|---|
| 80 | Network disk main business web external access port, not encrypted | http | main business server |
| 443 | Network disk main business web external access port, encrypted | https | Main business server |
| 3060 | Network disk main business node external access port, not encrypted | TCP | Main business server |
| 3080 | Network disk main business node external access port, encryption | TCP | Main business server |
Open ports are required between servers (open ports are required for internal server communication):
Generally, during actual deployment, only external network ports (external) will be restricted, and internal ports between servers will not be restricted. However, some users who deploy across networks and computer rooms will also need to limit internal ports.
| Host | Port number | Port purpose | Protocol | Target network segment |
|---|---|---|---|---|
| Business server | 6379 | redis access port for windows transcoding and search server | TCP | transcoding server and search server |
| Business server | 8080 | Used by windows transcoding server to access network disk business server | TCP | Transcoding server and search server |
| Business server | 3306 | Database port, used by the search server to access the database | TCP | Transcoding server and search server |
| Business server | 9000 | Docker cluster deployment, internal visual interface port | TCP | Transcoding server and search server |
| Business server | 111 | portmap port | TCP+UDP | Transcoding server and search server |
| Business server | 2049 | TCP+UDP | TCP+UDP | Transcoding server and search server |
| Business server | 35000 | mountd port | TCP+UDP | Transcoding server and search server |
| Business Server | 2376 | docker REST API port for TLS encryption | TCP | Native |
| Business server | 2377 | TCP port used for communication related to docker cluster management | TCP+UDP | Native |
| Business server | 7946 | TCP and UDP ports, used for communication between docker swarm nodes | TCP+UDP | Local machine |
| Business server | 4789 | docker overlay network default port | TCP+UDP | Local machine |
| Search server | 9200 | elastic port, used by the main business server | TCP | business server |
| Search server | 5601 | Kibana port, internal visual elastic interface access port | TCP | Business server |
| Search server | 9998 | tika port, extract document text server port | TCP | Business server |
| Search server | 9000 | Docker cluster deployment, internal visual interface port | TCP | Transcoding server and search server |
| Search Server | 2376 | docker REST API port for TLS encryption | TCP | Native |
| Search server | 2377 | TCP port used for communication related to docker cluster management | TCP | Native |
| Search server | 7946 | TCP and UDP ports, used for communication between docker swarm nodes | TCP+UDP | Local machine |
| Search server | 4789 | docker overlay network default port | TCP+UDP | Native |
| Transcoding server | Transcoding server | Can access the business server | Can access the business server | Can access the business server |
Ports that need to be opened during deployment:
| Port number | Port purpose | Open server | Destination IP address |
|---|---|---|---|
| 22 | SSH port number, used for SSH access | All servers | Springboard machine for deployment |
| 443 | Obtain authorization | All servers | 47.96.234.200 |
| 443 | Get installation source | All servers | 120.27.245.68 |
| 443 | Docker installation source | All servers | 13.35.121.100 |