Network communications between nodes within the cluster

The cluster contains multiple nodes, which can be contained in separate, firewalled networks. Network ports must be opened on firewalls to allow inter-node communication.

All communication between nodes is encrypted.

The following details are all based on the default settings. These can vary depending on the application setup and network design (such as NAT) of the solution, so may need adjustment accordingly. Where a dependant is noted, this is fully dependant on the configuration with no default.

These communications are all related to communications between application nodes within the cluster. There are a few different deployment models so the details below cover the different models and relevant ports. Review and implement according to the deployment model in use.

Note

Standalone is only a single node so this section is not relevant for that deployment model.

Proxy to proxy node

This is relevant if the proxy node is present in the system.

Communication	Protocol	Port
Cluster Communications	HTTPS	TCP 8443 bi-directional

Proxy to unified/application node

This is relevant if the proxy node is present in the system.

Communication	Protocol	Port
User access	HTTPS	TCP 443
Cluster Communications	HTTPS	TCP 8443 bi-directional

Unified node to unified node

This is relevant to the communications between the unified nodes (application and database combined). If the application and database nodes are split, refer to the relevant application and database node details below. Database arbiters run on port 27030.

Communication	Protocol	Port
Database access	database	TCP 27020 and 27030 bi-directional
Cluster Communications	HTTPS	TCP 8443

Application node to application node

This is relevant to the communications between application nodes in the system, only where the database node is separate from the application node (that is, not unified node).

Communication	Protocol	Port
Cluster communications	HTTPS	TCP 8443 bi-directional

Application node to database node

This is relevant to the communications between the application node and the database node, if the database node is separate from the application node. Database arbiters run on port 27030.

Communication	Protocol	Port
Database access	database	TCP 27020, 27030, 5432 bi-directional
Cluster Communications	HTTPS	TCP 8443

Database node to database node

This is relevant to the communications between the application node and the database node, if the database node is separate from the application node. Database arbiters run on port 27030.

Communication	Protocol	Port
Database access	database	TCP 27020 and 27030 bi-directional
Cluster Communications	HTTPS	TCP 8443