Distributed Cloud Ports Reference

A number of ports must be available for various Distributed Cloud components to function correctly.

Table 1. Distributed Cloud port requirements

Source

Port

Protocol

Network

Desc

HTTPS

Note

OAM_COMMON

22.0

TCP

oam

SSH

For admin login.

SYSTEMCONTROLLER

22.0

TCP

mgmt

ssh

Patching API

SUBCLOUD

22.0

TCP

mgmt or admin

ssh

For admin login.

OAM_COMMON

123.0

UDP

oam

NTP

SYSTEMCONTROLLER

162.0

UDP

mgmt

snmp trap

SUBCLOUD

162.0

UDP

mgmt or admin

snmp trap

OAM_COMMON

319.0

UDP

oam

PTP

precision time protocol (PTP) port

OAM_COMMON

320.0

UDP

oam

PTP

precision time protocol (PTP) port

SYSTEMCONTROLLER

389.0

TCP

mgmt

openLDAP

LDAP service

SYSTEMCONTROLLER

636.0

TCP

mgmt

openLDAP

OAM_COMMON

2222.0

UDP

oam

SM

OAM_COMMON

2223.0

UDP

oam

SM

OAM_COMMON

4545.0

TCP

oam

NFV

vim-restapi public endpoint.

SUBCLOUD

4546.0

TCP

mgmt or admin

stx-nfv

SYSTEMCONTROLLER

4546.0

TCP

mgmt

stx-nfv

Yes

vim-restapi admin endpoint.

OAM_COMMON

5000.0

TCP

oam

Keystone

SYSTEMCONTROLLER

5001.0

TCP

mgmt

keystone-api

Yes

SUBCLOUD

5001.0

TCP

mgmt or admin

keystone-api

SUBCLOUD

5492.0

TCP

mgmt or admin

patching-api

Yes

Patching API admin endpoint.

SYSTEMCONTROLLER

5492.0

TCP

mgmt

patching-api

Yes

Patching API admin endpoint.

SYSTEMCONTROLLER

5498.0

TCP

mgmt

usm-api

Yes

Unified Sofware Management API endpoint

SUBCLOUD

5498.0

TCP

mgmt or admin

usm-api

Yes

Unified Software Management API endpoint

OAM_COMMON

6385.0

TCP

oam

Sys Inv

SYSTEMCONTROLLER

6386.0

TCP

mgmt

sysinv-api

Yes

SUBCLOUD

6386.0

TCP

mgmt or admin

sysinv-api

Yes

OAM_COMMON

7480.0

TCP

oam

CEPH parameters

SYSTEM_CONFIG

7480.0

CEPH parameters

OAM_COMMON

7777.0

TCP

oam

SM API

sm-api public endpoint.

OAM_COMMON

8080.0

TCP

oam

Web access

OAM_DC

8119.0

TCP

oam

DC Manager Params API

SUBCLOUD

8220.0

TCP

mgmt or admin

dcdbsync-api

Yes

SYSTEMCONTROLLER

8220.0

TCP

mgmt

dcdbsync-api

Yes

SUBCLOUD

8326.0

TCP

mgmt or admin

dcagent-api

Yes

SYSTEMCONTROLLER

9001.0

TCP

mgmt

Docker registry

Yes

OAM_COMMON

9001.0

TCP

oam

Docker

Yes

SUBCLOUD

9001.0

TCP

mgmt or admin

Docker registry

Yes

SYSTEMCONTROLLER

9002.0

TCP

mgmt

Registry token server

Yes

SUBCLOUD

9002.0

TCP

mgmt or admin

Registry token server

Yes

OAM_COMMON

9002.0

TCP

oam

Docker

Yes

OAM_COMMON

9311.0

TCP

oam

Barbican

SUBCLOUD

9312.0

TCP

mgmt or admin

barbican-api

Yes

SYSTEMCONTROLLER

9312.0

TCP

mgmt

barbican-api

Yes

OAM_COMMON

15491.0

TCP

oam

Patching

patching-api public endpoint

OAM_COMMON

15497.0

TCP

oam

USM

Yes

Unified Software Management API

OAM_COMMON

18002.0

TCP

oam

Fault Management

SUBCLOUD

18003.0

TCP

mgmt or admin

stx-fault

Yes

SYSTEMCONTROLLER

18003.0

TCP

mgmt

stx-fault

Yes

OAM_DC

25000.0

TCP

oam

DC Orchestration Identity params API

DC Orchestration Identity params API

OAM_DC

25497.0

TCP

oam

DC Orchestration USM params API

DC Orchestration USM params API

OAM_DC

26385.0

TCP

oam

DC Orchestration sys-inv params API

DC Orchestration params patch API

OAM_COMMON

TCP

oam

Kube API server

Yes

SYSTEMCONTROLLER

TCP

mgmt

K8s API server

Yes

In addition to these ports, the iDRAC process uses port 443 on subcloud hosts for HTTPS communications. This port must be available.