Skip to content
This repository was archived by the owner on Jan 14, 2020. It is now read-only.

Ports and Protocols

shoenisch edited this page Mar 31, 2017 · 1 revision

Photon Platform uses the following ports and protocols. To view the role the ports and protocols play in Photon Platform, see the Photon Platform Transport Layer diagram.

Port 443: Photon Controller uses Port 443 for command-line and API HTTPS connections to the management service when Photon Controller is set up to use Lightwave authentication.

Port 4343: Photon Controller uses Port 4343 for HTTPS connections to the management web interface or its load balancer when Photon Controller is set up to use Lightwave authentication.

Port 9000: Photon Controller uses Port 9000 for unauthenticated connections to the RESTful API for back-end operations if Lightwave is not installed.

Port 80: If Photon Controller is set up without using Lightwave authentication, Photon Controller uses Port 80 for HTTP connections to the management web interface. Using Photon Controller without authentication is not recommended.

Port 22: System administrators can connect to virtual machines in ESXi hypervisors with SSH over TCP on Port 22.

Port 20000: Photon Platform's management service uses TCP over Port 20000 for its back-end HTTP communication.

Port 20001: Photon Platform's management service uses TCP over Port 20001 for its back-end HTTPS communication.

Port 2015: Photon Controller uses TCP over Port 2015 for the VMware DNS service.

Port 19000: Photon Controller uses TCP over Port 19000 for communications among VMs in the Photon Controller management plane for such services Xenon, the cloud store, and the housekeeper.

Port 8835: The Photon Controller management plane uses TCP over Port 8835 for its host client to communicate with vSphere hypervisors.

External Systems

Port 53 for DNS: Photon Platform uses TCP or UDP over Port 53 to communicate with an external name server for DNS.

Port 123 for NTP: Photon Platform uses UDP over Port 123 to communicate with an external NTP server.

Port 514 for syslog: Photon Platform's syslog service uses TCP and UDP over Port 514 to communicate with an external support system, such as VMware vRealize LogInsight.

Security Systems

Port 443: Photon Controller uses TCP over Port 443 to authenticate users with Lightwave.

Port 389: Photon Controller uses TCP over Port 389 to connect with the Lightwave LDAP service.

Port 636: Photon Controller uses TCP over Port 636 to connect with the Lightwave LDAPS service.

Port 88: Photon Controller uses TCP and UDP over Port 88 to connect with the Kerberos security protocol to the Lightwave key distribution center.

Port 2020: Photon Controller uses TCP over Port 2020 as part of the authentication framework.

Port 445: Lightwave uses UDP over Port 445 to communicate with the Microsoft directory service when Lightwave is integrated with Microsoft Active Directory. In such a case, Active Directory is an external system.

Port 2012: Lightwave uses TCP over Port 2012 for its directory service.

Port 2014: Lightwave uses TCP over Port 2014 for its certificate service.

Port 53: Lightwave uses TCP and UDP over Port 53 for DNS.

Shared Storage

Port 2049 for NFS: The ESXi hosts in a Photon Platform cluster use TCP and UDP over Port 2049 to connect with an NFS storage system.

Port 111 for rpcbind: For NFS, an ESXi host uses Port 111 over TCP and UDP for rpcbind.

Port 3260 for iSCSI: The ESXi hosts in a Photon Platform cluster use TCP over Port 3260 to connect with an iSCSI storage system.

VMware vSAN Storage

Port 2233: The ESXi hosts in a Photon Platform cluster use Port 2233 for transporting data to vSAN.

Ports 12345 and 23451: The ESXi hosts in a Photon Platform cluster use Ports 12345 and 23451 over UDP for clustering with vSAN.

NSX

Port 443: Network administrators connect to the NSX Manager with TCP on Port 443 for HTTPS connections to the web interface. The NSX-T API also uses TCP on Port 443 for communication with Photon Controller's core services.

Port 5672: The NSX-T Manager uses TCP over Port 5672 to communicate with ESXi hypervisors and the NSX Controllers.

Port 50 and 500: The NSX Controllers use IP and UDP over Ports 50 and 500 for the IPSec service.

Port 1234 The NSX Controller Cluster uses TCP over Port 1234 for the Icp-plane client's communication with the vSphere hypervisors.

Clone this wiki locally