Cloudera Enterprise 6.0.x | Other versions

Ports Used by CDH Components

All ports listed are TCP.

In the following table, the Access Requirement column for each port is usually either "Internal" or "External." In this context, "Internal" means that the port is used only for communication among the components; "External" means that the port can be used for either internal or external communication.

Component Service Port Access Requirement Configuration Comment
Apache Hadoop HDFS DataNode

9866

External

 
dfs.datanode.address

DataNode HTTP server port

1004

External

 
dfs.datanode.address

 

9864

External

 
dfs.datanode.http.address

 

9865

External

 
dfs.datanode.https.address

 

1006

External

 
dfs.datanode.http.address

 

9867

External

 
dfs.datanode.ipc.address

 
NameNode

8020

External

 
fs.default.name
or 
fs.defaultFS
 
fs.default.name
is deprecated (but still works)

8022

External

 
dfs.namenode.
servicerpc-address

Optional port used by HDFS daemons to avoid sharing the RPC port used by clients (8020). Cloudera recommends using port 8022.

9870

External

 
dfs.http.address
or 
dfs.namenode.http-address
 
dfs.http.address
is deprecated (but still works)

9871

External

 
dfs.https.address
or 
dfs.namenode.https-address
 
dfs.https.address
is deprecated (but still works)
Secondary NameNode

9868

Internal

 
dfs.secondary.http.address
or 
dfs.namenode.
secondary.
http-address
 
dfs.secondary.http.address
is deprecated (but still works)

9869

Internal

 
dfs.secondary.https.address

 
JournalNode

8485

Internal

 
dfs.namenode.
shared.edits.dir

 

8480

Internal

 
dfs.journalnode.
http-address

 

8481

Internal

 
dfs.journalnode.
https-address

 

Failover Controller

8019

Internal

 

Used for NameNode HA
NFS gateway

2049

External

 

nfs port (nfs3.server.port) 

4242

External

 

mountd port (nfs3.mountd.port) 

111

External

 

 
portmapper
or 
rpcbind
port
50079 External 
nfs.http.port
 The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
50579 External 
nfs.https.port
 The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
HttpFS

14000

 External    

14001

 External    
Apache Hadoop YARN (MRv2) ResourceManager

8032

External

 
yarn.
resourcemanager.
address

 

8030

Internal

 
yarn.
resourcemanager.
scheduler.address

 

8031

Internal

 
yarn.
resourcemanager.
resource-tracker.
address

 

8033

External

 
yarn.
resourcemanager.
admin.address

 

8088

External

 
yarn.
resourcemanager.
webapp.address

 

8090

External

 
yarn.
resourcemanager.
webapp.https.address

 
NodeManager

8040

Internal

 
yarn.
nodemanager.
localizer.
address

 

8041

Internal

 
yarn.
nodemanager.
address

 

8042

External

 
yarn.
nodemanager.
webapp.address

 

8044

External

 
yarn.
nodemanager.
webapp.https.address

 
JobHistory Server

10020

Internal

 
mapreduce.
jobhistory.
address

 

10033

Internal

 
mapreduce.
jobhistory.admin.
address

 

19888

External

 
mapreduce.
jobhistory.
webapp.address

 

19890

External

 
mapreduce.
jobhistory.
webapp.https.address

 

ApplicationMaster

  

External

  

The ApplicationMaster serves an HTTP service using an ephemeral port that cannot be restricted. This port is never accessed directly from outside the cluster by clients. All requests to the ApplicationMaster web server is routed using the YARN ResourceManager (proxy service). Locking down access to ephemeral port ranges within the cluster's network might restrict your access to the ApplicationMaster UI and its logs, along with the ability to look at running applications.

Shuffle HTTP

13562

Internal

 mapreduce.shuffle.port

 
Apache Flume

Flume Agent

41414

External

    
Apache Hadoop KMS Key Management Server

16000

External

 
kms_http_port

Applies to both Java KeyStore KMS and Key Trustee KMS.

16001

Localhost

 
kms_admin_port

Applies to both Java KeyStore KMS and Key Trustee KMS.
Apache HBase Master

16000

External

 
hbase.master.
port

IPC

16010

External

 
hbase.master.
info.port

HTTP
RegionServer

16020

External

 
hbase.
regionserver.
port

IPC

16030

External

 
hbase.
regionserver.
info.port

HTTP
HQuorumPeer

2181

Internal

 
hbase.
zookeeper.
property.
clientPort

HBase-managed ZooKeeper mode

2888

Internal

 
hbase.
zookeeper.
peerport

HBase-managed ZooKeeper mode

3888

Internal

 
hbase.
zookeeper.
leaderport

HBase-managed ZooKeeper mode

REST

20550

External

 
hbase.rest.port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

REST UI

8085

External

  

 
Thrift Server

9090

External

Pass -p <port> on CLI

 
Thrift Server

9095

External

  

 

 

9090

External

Pass --port <port> on CLI

 
Lily HBase Indexer 11060 External    
Apache Hive Metastore

9083

External

 

 
HiveServer2

10000

External

 
hive.
server2.
thrift.port

The Beeline command interpreter requires that you specify this port on the command line.

If you use Oracle database, you must manually reserve this port. For more information, see Reserving Ports for HiveServer 2.
HiveServer2 Web User Interface (UI)

10002

External

 
hive.
server2.
webui.port
in 
hive-site.xml

WebHCat Server

50111

External

 
templeton.port

 
Apache Hue Server

8888

External

 

 
Apache Impala Impala Daemon 21000 External   Used to transmit commands and receive results by impala-shell and version 1.2 of the Cloudera ODBC driver.
21050 External   Used to transmit commands and receive results by applications, such as Business Intelligence tools, using JDBC, the Beeswax query editor in Hue, and version 2.0 or higher of the Cloudera ODBC driver.
22000 Internal   Internal use only. Impala daemons use this port to communicate with each other.
23000 Internal   Internal use only. Impala daemons listen on this port for updates from the statestore daemon.
25000 External   Impala web interface for administrators to monitor and troubleshoot.
StateStore Daemon 25010 External   StateStore web interface for administrators to monitor and troubleshoot.
24000 Internal   Internal use only. The statestore daemon listens on this port for registration/unregistration requests.
Catalog Daemon 23020 Internal   Internal use only. The catalog daemon listens on this port for updates from the statestore daemon.
25020 External   Catalog service web interface for administrators to monitor and troubleshoot.
26000 Internal   Internal use only. The catalog service uses this port to communicate with the Impala daemons.
Apache Kafka Broker

9092

External/Internal

 port The primary communication port used by producers and consumers; also used for inter-broker communication.

9093

External/Internal

 ssl_port A secured communication port used by producers and consumers; also used for inter-broker communication.

9393

Internal

 jmx_port Internal use only. Used for administration via JMX.

9394

 Internal kafka.http.metrics.port Internal use only. This is the port via which the HTTP metric reporter listens. It is used to retrieve metrics through HTTP instead of JMX.
MirrorMaker

24042

 Internal jmx_port Internal use only. Used to administer the producer and consumer of the MirrorMaker.
Apache Kudu Master

7051

External

   Kudu Master RPC port

8051

External

   Kudu Master HTTP server port
TabletServer

7050

External

  

Kudu TabletServer RPC port

8050

External

Kudu TabletServer HTTP server port
Apache Oozie Oozie Server

11000

External

 
OOZIE_HTTP_PORT
in 
oozie-env.sh

HTTP

11443

External

  

HTTPS
Apache Sentry Sentry Server

8038

External

 
sentry.service.
server.rpc-port

 

51000

External

 
sentry.service.
web.port

 
Apache Solr Solr Server 8983 External   All Solr-specific actions, update/query.
8984 Internal   Solr administrative use.
Apache Spark

Default Master RPC port

7077

External

    

Default Worker RPC port

7078

 External    

Default Master web UI port

18080

External

    

Default Worker web UI port

18081

 External    

History Server

18088

External

 
history.port
  
Shuffle service 7337 Internal    
Apache Sqoop

Metastore

16000

External

 
sqoop.
metastore.
server.port

 
Apache ZooKeeper

Server (with CDH or Cloudera Manager)

2181

External

clientPort

Client port

Server (with CDH only)

2888

Internal

 
X in server.N
=host:X:Y

Peer

Server (with CDH only)

3888

Internal

 
X in server.N
=host:X:Y

Peer

Server (with CDH and Cloudera Manager)

3181

Internal

 
X in server.N
=host:X:Y

Peer

Server (with CDH and Cloudera Manager)

4181

Internal

 
X in server.N
=host:X:Y

Peer

ZooKeeper JMX port

9010

Internal

 
ZooKeeper will also use another randomly selected port for RMI. To allow Cloudera Manager to monitor ZooKeeper, you must do one of the following:
  • Open up all ports when the connection originates from the Cloudera Manager Server
  • Do the following:
    1. Open a non-ephemeral port (such as 9011) in the firewall.
    2. Install Oracle Java 7u4 JDK or higher.
    3. Add the port configuration to the advanced configuration snippet, for example: 
      -Dcom.sun.management.
jmxremote.rmi.port=9011
    4. Restart ZooKeeper.
Page generated July 25, 2018.