Friday, October 25, 2019

Securing ports in DSE

 1) NON-SSL


22 ssh

9042 Cassandra Native transport port

7000 Cluster communication port


2) SSL

22 ssh

9142 Cassandra native transport port

7001 Cluster communication port


3) Spark nodes

22 ssh

4040 to 4056 Spark application web site port (since spark.port.maxRetries is 16)

5598, 5599 Public internode ports for DSE FS

7080 Spark master console port

7081 Spark Worker web site port

8090 Spark job server REST API port

9999 Spark Job server JMX port

18080 Spark application history server

7077 Spark master internode communication


4) Non spark nodes

22 ssh

7199 JMX port

8609 DSE inter node messaging port


5) Graph

22 ssh

8182 Gremlin server port for DSE graph


6) Solr

22 ssh

8983 Solr website port


7) Datastax Studio

9091 Datastax studio server port


8) AlwaysOn SQL Port

9077 AlwaysOn SQL web port


9) Opscenter

8888 Opscenter web site port


10) DSE FS

5599 Internal to DSE FS enabled DC 


------------------


Miscellaneous:

10000 Spark SQL Thrift server port. Only in enabled

1024 - 65355 JMX reconnection / loopback ports


For Unrestricted access to Analytics nodes:

1) spark port for the driver to listen on &

2) Spark port for all block managers to listen on. 

we might require ports 11000 to 11032 as both takes default of 16 port max retries constituting a total of 32 ports.

Here, either we might use the ports that were not used by the organization if not 11000.


***