Ports Used by Components of CDH 5

All ports listed are TCP.

Component Service Qualifier Port Access Requirement Configuration Comment

Hadoop HDFS

DataNode

 

50010

External

dfs.datanode.
address

DataNode HTTP server port

 

DataNode

Secure

1004

External

dfs.datanode.
address

 

 

DataNode

 

50075

External

dfs.datanode.http.
address

 

 

DataNode

 

50475

External

dfs.datanode.https.
address

 

 

DataNode

Secure

1006

External

dfs.datanode.http.
address

 

 

DataNode

 

50020

External

dfs.datanode.ipc.
address

 

 

NameNode

 

8020

External

fs.default.
name
or
fs.defaultFS
fs.default.
name
is deprecated (but still works)

 

NameNode

 

8022

External

dfs.namenode.servicerpc-address

Optional port used by HDFS daemons to avoid sharing the RPC port used by clients (8020). Cloudera recommends using port 8022.

 

NameNode

 

50070

External

dfs.http.
address
or
dfs.namenode.
http-address
dfs.http.
address
is deprecated (but still works)

 

NameNode

Secure

50470

External

dfs.https.
address
or
dfs.namenode.
https-address
dfs.https.
address
is deprecated (but still works)

 

Secondary NameNode

 

50090

Internal

dfs.secondary.
http.address
or
dfs.namenode.
secondary.
http-address
dfs.secondary.
http.address
is deprecated (but still works)

 

Secondary NameNode

Secure

50495

Internal

dfs.secondary.
https.address

 

 

JournalNode

 

8485

Internal

dfs.namenode.
shared.edits.dir

 

 

JournalNode

 

8480

Internal

dfs.journalnode.
http-address

 

 

JournalNode

 

8481

Internal

dfs.journalnode.
https-address

 

 

Failover Controller

 

8019

Internal

 

Used for NameNode HA

 

NFS gateway

 

2049

External

 

nfs
port (
nfs3.server.port
)  

 

NFS gateway

 

4242

External

 

mountd
port (
nfs3.mountd.port
 

 

NFS gateway

 

111

External

 

portmapper
or
rpcbind
port
  NFS gateway   50079 External
nfs.http.port
CDH 5.4.0 and higher. The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
  NFS gateway Secure 50579 External
nfs.https.port
CDH 5.4.0 and higher. The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.

 

HttpFS

 

14000

External    

 

HttpFS

 

14001

External    

Hadoop MapReduce (MRv1)

JobTracker

 

8021

External

mapred.job.tracker

 

 

JobTracker

 

8023

External

mapred.ha.job.tracker

High availability service protocol port for the JobTracker. The JobTracker listens on a separate port for HA operations.

 

JobTracker

 

50030

External

mapred.job.
tracker.
http.address

 

 

JobTracker

Thrift Plugin

9290

Internal

jobtracker.
thrift.address

Required by Hue and Cloudera Manager Activity Monitor

 

TaskTracker

 

50060

External

mapred.task.
tracker.http.
address

 

 

TaskTracker

 

0

Localhost

mapred.task.
tracker.report.
address

Communicating with child (umbilical)

 

Failover Controller

 

8018

Internal

mapred.ha.zkfc.port

Used for JobTracker HA

Hadoop YARN (MRv2)

ResourceManager

 

8032

External

yarn.
resourcemanager.
address

 

 

ResourceManager

 

8030

Internal

yarn.
resourcemanager.
scheduler.address

 

 

ResourceManager

 

8031

Internal

yarn.
resourcemanager.
resource-tracker.
address

 

 

ResourceManager

 

8033

External

yarn.
resourcemanager.
admin.address

 

 

ResourceManager

 

8088

External

yarn.
resourcemanager.
webapp.address

 

 

ResourceManager

 

8090

External

yarn.
resourcemanager.
webapp.https.address

 

 

NodeManager

 

8040

Internal

yarn.
nodemanager.
localizer.
address

 

 

NodeManager

 

8041

Internal

yarn.
nodemanager.
address

 

 

NodeManager

 

8042

External

yarn.
nodemanager.
webapp.address

 

 

NodeManager

 

8044

External

yarn.
nodemanager.
webapp.https.address

 

 

JobHistory Server

 

10020

Internal

mapreduce.
jobhistory.
address

 

 

JobHistory Server

 

10033

Internal

mapreduce.
jobhistory.admin.
address

 

 

Shuffle HTTP

 

13562

Internal

mapreduce.shuffle.port

 

 

JobHistory Server

 

19888

External

mapreduce.
jobhistory.
webapp.address

 

 

JobHistory Server

 

19890

External

mapreduce.
jobhistory.
webapp.https.address

 

 

ApplicationMaster

   

External

 

The ApplicationMaster serves an HTTP service using an ephemeral port that cannot be restricted. This port is never accessed directly from outside the cluster by clients. All requests to the ApplicationMaster web server is routed using the YARN ResourceManager (proxy service). Locking down access to ephemeral port ranges within the cluster's network might restrict your access to the ApplicationMaster UI and its logs, along with the ability to look at running applications.

Flume

Flume Agent

 

41414

External

   

Hadoop KMS

Key Management Server

 

16000

External

kms_http_port

CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.

 

Key Management Server

 

16001

Localhost

kms_admin_port

CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.

HBase

Master

 

60000

External

hbase.master.
port

IPC

 

Master

 

60010

External

hbase.master.
info.port

HTTP

 

RegionServer

 

60020

External

hbase.
regionserver.
port

IPC

 

RegionServer

 

60030

External

hbase.
regionserver.
info.port

HTTP

 

HQuorumPeer

 

2181

Internal

hbase.
zookeeper.
property.
clientPort

HBase-managed ZooKeeper mode

 

HQuorumPeer

 

2888

Internal

hbase.
zookeeper.
peerport

HBase-managed ZooKeeper mode

 

HQuorumPeer

 

3888

Internal

hbase.
zookeeper.
leaderport

HBase-managed ZooKeeper mode

 

REST

Non- Cloudera Manager - managed

8080

External

hbase.rest.port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

 

REST

Cloudera Manager - managed

20550

External

hbase.rest.port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

 

REST UI

 

8085

External

 

 

 

Thrift Server

Thrift Server

9090

External

Pass -p <port> on CLI

 

 

Thrift Server

 

9095

External

 

 

 

 

Avro server

9090

External

Pass --port <port> on CLI

 

  hbase-solr-indexer Lily Indexer 11060 External    

Hive

Metastore

 

9083

External

 

 

 

HiveServer2

 

10000

External

hive.
server2.
thrift.port

The Beeline command interpreter requires that you specify this port on the command line.

If you use Oracle database, you must manually reserve this port. For more information, see Reserving Ports for HiveServer 2.

 

HiveServer2 Web User Interface (UI)

 

10002

External

hive.
server2.
webui.port
in
hive-site.xml

 

WebHCat Server

 

50111

External

templeton.port

 

Hue

Server

 

8888

External

 

 

Oozie

Oozie Server

 

11000

External

OOZIE_HTTP_PORT
in
oozie-env.sh

HTTP

 

Oozie Server

SSL

11443

External

 

HTTPS

 

Oozie Server

 

11001

localhost

OOZIE_ADMIN_PORT
in
oozie-env.sh

Shutdown port

Sentry

Sentry Server

 

8038

External

sentry.service.
server.rpc-port

 

 

Sentry Server

 

51000

External

sentry.service.
web.port

 

Spark

Default Master RPC port

 

7077

External

   
 

Default Worker RPC port

 

7078

External    
 

Default Master web UI port

 

18080

External

   
 

Default Worker web UI port

 

18081

External    
 

History Server

 

18088

External

history.port
 

 

JournalNode

 

8480

Internal

dfs.journalnode.
http-address

 

 

JournalNode

 

8481

Internal

dfs.journalnode.
https-address

 

 

Failover Controller

 

8019

Internal

 

Used for NameNode HA

 

NFS gateway

 

2049

External

 

nfs
port (
nfs3.server.port
)  

 

NFS gateway

 

4242

External

 

mountd
port (
nfs3.mountd.port
 

 

NFS gateway

 

111

External

 

portmapper
or
rpcbind
port

 

HttpFS

 

14000

External    

 

HttpFS

 

14001

External    

Hadoop MapReduce (MRv1)

JobTracker

 

8021

External

mapred.job.
tracker

 

 

JobTracker

 

8023

External

mapred.ha.job.tracker

High Availability service protocol port for the JobTracker. The JobTracker listens on a separate port for HA operations.

 

JobTracker

 

50030

External

mapred.job.
tracker.
http.address

 

 

JobTracker

Thrift Plugin

9290

Internal

jobtracker.
thrift.address

Required by Hue and Cloudera Manager Activity Monitor

 

TaskTracker

 

50060

External

mapred.task.
tracker.http.
address

 

 

TaskTracker

 

0

Localhost

mapred.task.
tracker.report.
address

Communicating with child (umbilical)

 

Failover Controller

 

8018

Internal

mapred.ha.zkfc.port

Used for JobTracker HA

Hadoop YARN (MRv2)

ResourceManager

 

8032

External

yarn.
resourcemanager.
address

 

 

ResourceManager

 

8030

Internal

yarn.
resourcemanager.
scheduler.address

 

 

ResourceManager

 

8031

Internal

yarn.
resourcemanager.
resource-tracker.
address

 

 

ResourceManager

 

8033

External

yarn.
resourcemanager.
admin.address

 

 

ResourceManager

 

8088

External

yarn.
resourcemanager.
webapp.address

 

 

ResourceManager

 

8090

External

yarn.
resourcemanager.
webapp.https.address

 

 

NodeManager

 

8040

Internal

yarn.
nodemanager.
localizer.
address

 

 

NodeManager

 

8041

Internal

yarn.
nodemanager.
address

 

 

NodeManager

 

8042

External

yarn.
nodemanager.
webapp.address

 

 

NodeManager

 

8044

External

yarn.
nodemanager.
webapp.https.address

 

 

JobHistory Server

 

10020

Internal

mapreduce.
jobhistory.
address

 

 

JobHistory Server

 

10033

Internal

mapreduce.
jobhistory.admin.
address

 

 

Shuffle HTTP

 

13562

Internal

 

 

 

JobHistory Server

 

19888

External

mapreduce.
jobhistory.
webapp.address

 

 

JobHistory Server

 

19890

External

mapreduce.
jobhistory.
webapp.https.address

 

 

ApplicationMaster

   

External

 

The ApplicationMaster serves an HTTP service using an ephemeral port that cannot be restricted. This port is never accessed directly from outside the cluster by clients. All requests to the ApplicationMaster web server is routed using the YARN ResourceManager (proxy service). Locking down access to ephemeral port ranges within the cluster's network might restrict your access to the ApplicationMaster UI and its logs, along with the ability to look at running applications.

Flume

Flume Agent

 

41414

External

Hadoop KMS

Key Management Server

 

16000

External

kms_http_port

CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.

Key Management Server

 

16001

Localhost

kms_admin_port

CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.

HBase

Master

 

60000

External

hbase.master.
port

IPC

 

Master

 

60010

External

hbase.master.
info.port

HTTP

 

RegionServer

 

60020

External

hbase.
regionserver.
port

IPC

 

RegionServer

 

60030

External

hbase.
regionserver.
info.port

HTTP

 

HQuorumPeer

 

2181

Internal

hbase.
zookeeper.
property.
clientPort

HBase-managed ZK mode

 

HQuorumPeer

 

2888

Internal

hbase.
zookeeper.
peerport

HBase-managed ZK mode

 

HQuorumPeer

 

3888

Internal

hbase.
zookeeper.
leaderport

HBase-managed ZK mode

 

REST

Non-
CM-
managed

8080

External

hbase.rest.
port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

 

REST

CM-
Managed

20550

External

hbase.rest.
port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

 

REST UI

8085

External

 

 

 

ThriftServer

Thrift Server

9090

External

Pass -p <port> on CLI

 

 

ThriftServer

9095

External

 

 

 

 

Avro server

9090

External

Pass --port <port> on CLI

 

  hbase-solr-indexer Lily Indexer 11060 External    

Hive

Metastore

 

9083

External

 

 

 

HiveServer2

 

10000

External

hive.
server2.
thrift.port

The Beeline command interpreter requires that you specify this port on the command line.

 

WebHCat Server

 

50111

External

templeton.port

 

Sentry

Sentry Server

 

8038

External

sentry.service.
server.rpc-port

 

Sentry Server

 

51000

External

sentry.service.
web.port

 

Sqoop

Metastore

 

16000

External

sqoop.
metastore.
server.port

 

Sqoop 2

Sqoop 2 server

8005

Localhost

SQOOP_ADMIN_PORT environment variable

 

Sqoop 2 server

 

12000

External

 

 

 

Sqoop 2

 

12001

External

 

Admin port

ZooKeeper

Server (with CDH 5 or Cloudera Manager 5)

 

2181

External

clientPort

Client port

 

Server (with CDH 5 only)

 

2888

Internal

X in server.N
=host:X:Y

Peer

 

Server (with CDH 5 only)

 

3888

Internal

X in server.N
=host:X:Y

Peer

 

Server (with CDH 5 and Cloudera Manager 5)

 

3181

Internal

X in server.N
=host:X:Y

Peer

 

Server (with CDH 5 and Cloudera Manager 5)

 

4181

Internal

X in server.N
=host:X:Y

Peer

 

ZooKeeper JMX port

 

9010

Internal

 

ZooKeeper will also use another randomly selected port for RMI. To allow Cloudera Manager to monitor ZooKeeper, you must EITHER
  • Open up all ports when the connection originates from the Cloudera Manager server; OR
  • Do the following:
    1. Open a non-ephemeral port (such as 9011) in the firewall.
    2. Install Oracle Java 7u4 JDK or later.
    3. Add the port configuration to the safety valve, for example:
      Dcom.sun.
      management.
      jmxremote.
      rmi.port=9011
    4. Restart ZooKeeper.

Hue

Server

 

8888

External

 

 

Oozie

Oozie Server

 

11000

External

OOZIE_HTTP_
PORT
in
oozie-env.sh

HTTP

Oozie Server

SSL

11443

External

HTTPS

 

Oozie Server

 

11001

localhost

OOZIE_ADMIN_
PORT
in
oozie-env.sh

Shutdown port

Spark

Default Master RPC port

 

7077

External

   
 

Default Worker RPC port

 

7078

External    
 

Default Master web UI port

 

18080

External

   
 

Default Worker web UI port

 

18081

External    

History Server

 

18088

External

history.port