Network Port Usage - Revision history

Qadmin: /* Notes & Recommendations */

2026-05-11T20:20:26Z

Notes & Recommendations

← Older revision		Revision as of 20:20, 11 May 2026
Line 101:		Line 101:
	\|}		\|}

	=== Notes & Recommendations ===		== Notes & Recommendations ==

	* '''NFS auxiliary ports''' (<code>rpc.statd</code>, <code>rpc.mountd</code>) are assigned dynamically by default. For consistent firewall rules, pin them by setting <code>STATD_PORT</code> and <code>MOUNTD_PORT</code> in <code>/etc/default/nfs-kernel-server</code>.		* '''NFS auxiliary ports''' (<code>rpc.statd</code>, <code>rpc.mountd</code>) are assigned dynamically by default. For consistent firewall rules, pin them by setting <code>STATD_PORT</code> and <code>MOUNTD_PORT</code> in <code>/etc/default/nfs-kernel-server</code>.

2026-05-11T20:20:12Z

← Older revision		Revision as of 20:20, 11 May 2026
Line 71:		Line 71:
	\|}		\|}

	=== Loopback-Only Internal Ports ===		== Loopback-Only Internal Ports ==

	The following ports are bound to <code>127.0.0.1</code> only and are not accessible from the network. They are listed here for completeness and troubleshooting reference.		The following ports are bound to <code>127.0.0.1</code> only and are not accessible from the network. They are listed here for completeness and troubleshooting reference.

2026-05-11T19:24:54Z

Network Port Usage Reference Guide

← Older revision		Revision as of 19:24, 11 May 2026
Line 11:		Line 11:
	\|-		\|-
	\| '''5151''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTP) \|\| Allow from admin networks only		\| '''5151''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTP) \|\| Allow from admin networks only
	\|-
	~~\| '''5152''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTPS) (loopback only) \|\| Internal only (loopback)~~
	\|}		\|}

Line 51:		Line 49:
	\|-		\|-
	\| '''8888''' \|\| TCP6 \|\| <code>chronograf</code> \|\| InfluxDB Chronograf UI \|\| Restrict to admin networks		\| '''8888''' \|\| TCP6 \|\| <code>chronograf</code> \|\| InfluxDB Chronograf UI \|\| Restrict to admin networks
	\|-
	~~\| '''8086''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB HTTP API (loopback only) \|\| Internal only (loopback)~~
	\|-
	~~\| '''8088''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB RPC (loopback only) \|\| Internal only (loopback)~~
	\|}		\|}

2026-05-11T19:16:50Z

Network Port Usage Reference Guide

← Older revision		Revision as of 19:16, 11 May 2026
Line 12:		Line 12:
	\| '''5151''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTP) \|\| Allow from admin networks only		\| '''5151''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTP) \|\| Allow from admin networks only
	\|-		\|-
	\| '''5152''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTPS) — loopback only \|\| Internal only (loopback)		\| '''5152''' \|\| TCP \|\| <code>qs_service</code> \|\| QuantaStor Management API (HTTPS) (loopback only) \|\| Internal only (loopback)
	\|}		\|}

2026-05-11T19:14:06Z

← Older revision		Revision as of 19:14, 11 May 2026
Line 1:		Line 1:
	[[Category:install_guide]]		[[Category:install_guide]]

	== Network Port Usage Reference Guide ==		== Network Port Usage Reference Guide ==

2026-05-11T19:13:51Z

QuantaStor Network Port Reference

← Older revision		Revision as of 19:13, 11 May 2026
Line 1:		Line 1:
	[[Category:install_guide]]		[[Category:install_guide]]
	== ~~QuantaStor~~ Network Port Reference ==		== Network Port Usage Reference Guide ==

	This page lists all TCP/UDP ports used by QuantaStor and its supporting services. Ports bound only to <code>127.0.0.1</code> (loopback) are for internal inter-process communication and are not externally reachable. Firewall rules should be applied to externally bound ports based on the guidance in the rightmost column.		This page lists all TCP/UDP ports used by QuantaStor and its supporting services. Ports bound only to <code>127.0.0.1</code> (loopback) are for internal inter-process communication and are not externally reachable. Firewall rules should be applied to externally bound ports based on the guidance in the rightmost column.

2026-05-11T19:13:04Z

← Older revision		Revision as of 19:13, 11 May 2026
Line 1:		Line 1:
			[[Category:install_guide]]
	== QuantaStor Network Port Reference ==		== QuantaStor Network Port Reference ==

2026-05-11T19:11:46Z

Web UI & Proxy (nginx)

← Older revision		Revision as of 19:11, 11 May 2026
Line 22:		Line 22:
	\| '''443''' \|\| TCP \|\| <code>nginx</code> \|\| HTTPS - QuantaStor Web UI \|\| Allow from admin networks		\| '''443''' \|\| TCP \|\| <code>nginx</code> \|\| HTTPS - QuantaStor Web UI \|\| Allow from admin networks
	\|-		\|-
	\| '''8080''' \|\| TCP \|\| <code>nginx</code> \|\| Alternate HTTP proxy -> redirects to HTTPS \|\| ~~Restrict to~~ admin networks		\| '''8080''' \|\| TCP \|\| <code>nginx</code> \|\| Alternate HTTP proxy -> redirects to HTTPS \|\| Allow from admin networks
	\|-		\|-
	\| '''8153''' \|\| TCP \|\| <code>nginx</code> \|\| QuantaStor Web UI proxy \|\| Allow from admin networks		\| '''8153''' \|\| TCP \|\| <code>nginx</code> \|\| QuantaStor Web UI proxy \|\| Allow from admin networks

2026-05-11T19:11:18Z

Monitoring & Telemetry

← Older revision		Revision as of 19:11, 11 May 2026
Line 50:		Line 50:
	\| '''8888''' \|\| TCP6 \|\| <code>chronograf</code> \|\| InfluxDB Chronograf UI \|\| Restrict to admin networks		\| '''8888''' \|\| TCP6 \|\| <code>chronograf</code> \|\| InfluxDB Chronograf UI \|\| Restrict to admin networks
	\|-		\|-
	\| '''8086''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB HTTP API — loopback only \|\| Internal only (loopback)		\| '''8086''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB HTTP API (loopback only) \|\| Internal only (loopback)
	\|-		\|-
	\| '''8088''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB RPC — loopback only \|\| Internal only (loopback)		\| '''8088''' \|\| TCP \|\| <code>influxd</code> \|\| InfluxDB RPC (loopback only) \|\| Internal only (loopback)
	\|}		\|}

2026-05-11T19:10:53Z

Web UI & Proxy (nginx)

← Older revision		Revision as of 19:10, 11 May 2026
Line 18:		Line 18:
	! Port !! Proto !! Process !! Service / Description !! Firewall Recommendation		! Port !! Proto !! Process !! Service / Description !! Firewall Recommendation
	\|-		\|-
	\| '''80''' \|\| TCP \|\| <code>nginx</code> \|\| HTTP — redirects to HTTPS \|\| Allow or redirect to 443		\| '''80''' \|\| TCP \|\| <code>nginx</code> \|\| HTTP -> redirects to HTTPS \|\| Allow or redirect to 443
	\|-		\|-
	\| '''443''' \|\| TCP \|\| <code>nginx</code> \|\| HTTPS — QuantaStor Web UI \|\| Allow from admin networks		\| '''443''' \|\| TCP \|\| <code>nginx</code> \|\| HTTPS - QuantaStor Web UI \|\| Allow from admin networks
	\|-		\|-
	\| '''8080''' \|\| TCP \|\| <code>nginx</code> \|\| Alternate HTTP proxy — redirects to HTTPS \|\| Restrict to admin networks		\| '''8080''' \|\| TCP \|\| <code>nginx</code> \|\| Alternate HTTP proxy -> redirects to HTTPS \|\| Restrict to admin networks
	\|-		\|-
	\| '''8153''' \|\| TCP \|\| <code>nginx</code> \|\| QuantaStor Web UI proxy \|\| Allow from admin networks		\| '''8153''' \|\| TCP \|\| <code>nginx</code> \|\| QuantaStor Web UI proxy \|\| Allow from admin networks