Management Server and System VMs' Listening Ports and Exposed Services

1

*

3306

mysqld

/etc/my.cnf

MySQL database, the port should be protected.

2

*

8080

tomcat

Default Web Console HTTP Port

3

*

8250

tomcat

simulator.properties

MS-Agent Communication

4

*

7080

tomcat

server.xml

AWSAPI

5

*

9090

tomcat

db.properties

MS-MS Communication

6

*

20400

tomcat

server.xml

AJP Connector

7

*

45219

tomcat

tomcat6.conf

JMX Port (no authentication)

8

*

other high end ports

tomcat

1

Guest

53

dnsmasq

2

Guest

80

apache2

3

Guest

443

apache2

4

Guest

8080

socat

password server: /opt/cloud/bin/serve_password.sh

5

Link Local

3922

sshd

6

*

35999

haproxy

does haproxy need to listen on all interfaces?

1

*

443

java

Console Proxy Listening Port

2

*

8001

java

/usr/local/cloud/systemvm/conf/consoleproxy.properties

Deprecated. Console proxy internal port for management server to get current load status of a running proxy(this will be obsolete since load report is done via secure agent/management server channel)

3

Link Local

3922

sshd

1

*

111

rpc.portmap

Should be closed if not needed or limited to internal interfaces

2

*

high end port

rpc.statd

Should be closed if not needed or limited to internal interfaces

3

public

80

apache2

zone-to-zone copy over http

4

public

443

apache2

zone-to-zone copy over https

5

Link Local

3922

sshd