Default ports

Port Requirements →  across different products

YugabyteDB YugabyteDB Anywhere

Client APIs

Application clients connect to the following addresses:

Internode RPC communication

Internode (server-to-server or node-to-node) communication, including xCluster, is managed using RPC calls on the following addresses:

To enable login to the machines running these servers, the SSH port 22 should be opened.

xCluster uses the YB-Master port 7100 for the initial communication, and then uses the YB-TServer port 9100 to get data changes.

Port 7000 (to access the admin UI) should also be open to all nodes, as requests made to the Master UI of a non-leader Master are internally redirected to the leader Master's 7000 port.

The YB Controller service manages backup and restore operations. If you are using YB Controller, open the following port on all YugabyteDB nodes:

Admin web server

Admin web server UI can be viewed at the following addresses:

For clusters started using yugabyted, the YugabyteDB UI can be viewed at the following address:

Firewall rules

The following common ports are required for firewall rules:

Firewall changes for CIS hardened images

Running YugabyteDB on CIS hardened RHEL 8 or 9 requires the following changes to the firewall:

#!/bin/bash

sudo dnf repolist
sudo dnf config-manager --set-enabled extras
sudo dnf install -y firewalld
sudo systemctl start firewalld

ports=(5433 9042 7100 9100 18018 9070 7000 9000 12000 13000 15433)

for port in "${ports[@]}"; do
   sudo firewall-cmd --zone=public --add-port=${port}/tcp --permanent
done

sudo firewall-cmd --reload

If you have customized any port settings, be sure to replace the port numbers as appropriate.

Prometheus monitoring

YugabyteDB servers expose time series performance metrics in the Prometheus exposition format on multiple HTTP endpoints that have the following structure:

<target>/prometheus-metrics

You can access the Prometheus server on port 9090 of the YugabyteDB Anywhere node, and you can see the list of targets at http://<yugaware-ip>:9090/targets. In particular, note port 9300 for node-level metrics:

For information on using Prometheus with YugabyteDB, see Observability with Prometheus.

Servers

Use the following targets to monitor YB-TServer and YB-Master server metrics:

APIs

Use the following YB-TServer targets for the various API metrics: