Network Communications between Nodes within the Cluster

The cluster contains multiple nodes which can be contained in separate firewalled networks. Network ports need to be opened on firewalls to allow inter-node communication.

All communication between nodes is encrypted.

The following details are all based on the default settings. These can vary depending on the application setup and network design (such as NAT) of the solution, so may need adjustment accordingly. Where a dependant is noted, this is fully dependant on the configuration with no default.

These communications are all related to communications between application nodes within the cluster. There are a few different deployment models so the details below cover the different models and relevant ports. So review and implement according to the deployment model in use.

Note that Standalone is only a single node so this section is not relevant for that deployment model.

• Proxy to Proxy Node

  This is relevant if the proxy node is present in the system.

  Communication	Protocol	Port
  Cluster Communications	HTTPS	TCP 8443 bi-directional

• Proxy to Unified/Application Node

  This is relevant if the proxy node is present in the system.

  Communication	Protocol	Port
  User access	HTTPS	TCP 443
  Cluster Communications	HTTPS	TCP 8443 bi-directional

• Unified Node to Unified node

  This is relevant to the communications between the unified nodes (application and database combined). If the application and database nodes are split, then see the relevant application and database node details below. Database arbiters run on port 27030.

  Communication	Protocol	Port
  Database access	database	TCP 27020 and 27030 bi-directional
  Cluster Communications	HTTPS	TCP 8443

• Application node to Application node

  This is relevant to the communications between application nodes nodes in the system. This is only relevant where the database node is separate from the application node (in other words, not Unified node).

  Communication	Protocol	Port
  Cluster communications	HTTPS	TCP 8443 bi-directional

• Application Node to Database node

  This is relevant to the communications between the application node and the database node. This is relevant if the database node is separate from the application node. Database arbiters run on port 27030.

  Communication	Protocol	Port
  Database access	database	TCP 27020 and 27030 bi-directional
  Cluster Communications	HTTPS	TCP 8443

• Database Node to Database node

  This is relevant to the communications between the application node and the database node.  This is relevant if the database node is separate from the application node. Database arbiters run on port 27030.

  Communication	Protocol	Port
  Database access	database	TCP 27020 and 27030 bi-directional
  Cluster Communications	HTTPS	TCP 8443