Application ports
Below is a table listing the required ports for each application component.
| Destination Server Name | Destination Port | Source Server Name | Source Port | Service name | Access Type |
|---|---|---|---|---|---|
| APP (WF Control Tower) | 8080/tcp and 8443/tcp | all | all | nginx | external access (for user access) |
| DB | 8080/tcp and 8443/tcp | all | all | nginx | external access (for user access) |
| 3306/tcp | APP | all | mysql | internal (used for WF servers communcation) | |
| 5432/tcp | APP | all | postgresql | internal | |
| 27016/tcp | APP | all | mongodb | internal | |
| 8200/tcp | APP | all | secure vault | internal | |
| 3306/tcp | BI | all | mysql | internal | |
| 5432/tcp | BI | all | postgresql | internal | |
| 27016/tcp | BI | all | mongodb | internal | |
| 5432/tcp | VDS Master | all | postgresql | internal | |
| 5432/tcp | VDS Slave | all | postgresql | internal | |
| 8200/tcp | APM | all | secure vault | internal | |
| 27016/tcp | OCR | all | mongodb | internal | |
| 8200/tcp | OCR | all | secure vault | internal | |
| 8200/tcp | VDS Master | all | secure vault | internal | |
| 8200/tcp | RPA | all | secure vault | internal | |
| 8200/tcp | VDS Slaves | all | secure vault | internal | |
| OCR | 8080/tcp and 8443/tcp | all | all | nginx | external access (for user access) |
| VDS Master | 8000/tcp | APP | all | VDS service | internal (make external for debug) |
| 8000/tcp | VDS Slave | all | VDS service | internal | |
| 8480/tcp | VDS Slave | all | marathon | internal (make external for debug) | |
| 45672/tcp | VDS Slave | all | rabbitmq | internal (make external for debug) | |
| 5672/tcp | VDS Slave | all | rabbitmq | internal | |
| 2181/tcp | VDS Slave | all | zookeeper | internal | |
| 5050/tcp | VDS Slave | all | mesos-master | internal (make external for debug) | |
| 4567/tcp | VDS Slave | all | logstash | internal | |
| VDS NFS (VDS master if not separated) | 111/tcp, 111/udp | VDS Slave | all | NFS | internal |
| (if separated open ports for VDS Master) | 1039/tcp, 1039/udp | VDS Slave | all | NFS | internal |
| 1047/tcp, 1047/udp | VDS Slave | all | NFS | internal | |
| 1048/tcp, 1048/udp | VDS Slave | all | NFS | internal | |
| 2049/tcp, 2049/udp | VDS Slave | all | NFS | internal | |
| VDS Slave(s) | 5051/tcp | VDS Master | all | mesos-slave | internal (make external for debug) |
| RPA | 80/tcp and 443/tcp | APP | all | RPA hub | internal |
| 4444/tcp | APP | all | RPA hub | internal | |
| 10000-10100/tcp | APM | all | WFAgent | internal | |
| 5000-5100/tcp | APP | all | RPA nodes | internal | |
| 5000-5100/tcp | APM | all | RPA nodes | internal | |
| APM | 8080/tcp and 8443/tcp | all | all | external access (for user access) | |
| 13017/tcp | BI | all | internal | ||
| BI | 80/tcp and 443/tcp | all | all | external access (for user access) |