Ports Used by Components of CDH 5

All ports listed are TCP.

Component	Service	Qualifier	Port	Access Requirement	Configuration	Comment
Hadoop HDFS	DataNode		50010	External	dfs.datanode.address	DataNode HTTP server port
	DataNode	Secure	1004	External	dfs.datanode.address
	DataNode		50075	External	dfs.datanode.http.address
	DataNode		50475	External	dfs.datanode.https.address
	DataNode	Secure	1006	External	dfs.datanode.http.address
	DataNode		50020	External	dfs.datanode.ipc.address
	NameNode		8020	External	fs.default.name or fs.defaultFS	fs.default.name is deprecated (but still works)
	NameNode		8022	External	dfs.namenode. servicerpc-address	Optional port used by HDFS daemons to avoid sharing the RPC port used by clients (8020). Cloudera recommends using port 8022.
	NameNode		50070	External	dfs.http.address or dfs.namenode.http-address	dfs.http.address is deprecated (but still works)
	NameNode	Secure	50470	External	dfs.https.address or dfs.namenode.https-address	dfs.https.address is deprecated (but still works)
	Secondary NameNode		50090	Internal	dfs.secondary.http.address or dfs.namenode. secondary. http-address	dfs.secondary.http.address is deprecated (but still works)
	Secondary NameNode	Secure	50495	Internal	dfs.secondary.https.address
	JournalNode		8485	Internal	dfs.namenode. shared.edits.dir
	JournalNode		8480	Internal	dfs.journalnode. http-address
	JournalNode		8481	Internal	dfs.journalnode. https-address
	Failover Controller		8019	Internal		Used for NameNode HA
	NFS gateway		2049	External		nfs port ( nfs3.server.port )
	NFS gateway		4242	External		mountd port ( nfs3.mountd.port
	NFS gateway		111	External		portmapper or rpcbind port
	NFS gateway		50079	External	nfs.http.port	CDH 5.4.0 and higher. The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
	NFS gateway	Secure	50579	External	nfs.https.port	CDH 5.4.0 and higher. The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
	HttpFS		14000	External
	HttpFS		14001	External
Hadoop MapReduce (MRv1)	JobTracker		8021	External	mapred.job.tracker
	JobTracker		8023	External	mapred.ha.job.tracker	High availability service protocol port for the JobTracker. The JobTracker listens on a separate port for HA operations.
	JobTracker		50030	External	mapred.job. tracker. http.address
	JobTracker	Thrift Plugin	9290	Internal	jobtracker. thrift.address	Required by Hue and Cloudera Manager Activity Monitor
	TaskTracker		50060	External	mapred.task. tracker.http. address
	TaskTracker		0	Localhost	mapred.task. tracker.report. address	Communicating with child (umbilical)
	Failover Controller		8018	Internal	mapred.ha.zkfc.port	Used for JobTracker HA
Hadoop YARN (MRv2)	ResourceManager		8032	External	yarn. resourcemanager. address
	ResourceManager		8030	Internal	yarn. resourcemanager. scheduler.address
	ResourceManager		8031	Internal	yarn. resourcemanager. resource-tracker. address
	ResourceManager		8033	External	yarn. resourcemanager. admin.address
	ResourceManager		8088	External	yarn. resourcemanager. webapp.address
	ResourceManager		8090	External	yarn. resourcemanager. webapp.https.address
	NodeManager		8040	Internal	yarn. nodemanager. localizer. address
	NodeManager		8041	Internal	yarn. nodemanager. address
	NodeManager		8042	External	yarn. nodemanager. webapp.address
	NodeManager		8044	External	yarn. nodemanager. webapp.https.address
	JobHistory Server		10020	Internal	mapreduce. jobhistory. address
	JobHistory Server		10033	Internal	mapreduce. jobhistory.admin. address
	Shuffle HTTP		13562	Internal	`mapreduce.shuffle.port`
	JobHistory Server		19888	External	mapreduce. jobhistory. webapp.address
	JobHistory Server		19890	External	mapreduce. jobhistory. webapp.https.address
	ApplicationMaster			External		The ApplicationMaster serves an HTTP service using an ephemeral port that cannot be restricted. This port is never accessed directly from outside the cluster by clients. All requests to the ApplicationMaster web server is routed using the YARN ResourceManager (proxy service). Locking down access to ephemeral port ranges within the cluster's network might restrict your access to the ApplicationMaster UI and its logs, along with the ability to look at running applications.
Flume	Flume Agent		41414	External
Hadoop KMS	Key Management Server		16000	External	kms_http_port	CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.
	Key Management Server		16001	Localhost	kms_admin_port	CDH 5.2.1 and higher. Applies to both Java KeyStore KMS and Key Trustee KMS.
HBase	Master		60000	External	hbase.master. port	IPC
	Master		60010	External	hbase.master. info.port	HTTP
	RegionServer		60020	External	hbase. regionserver. port	IPC
	RegionServer		60030	External	hbase. regionserver. info.port	HTTP
	HQuorumPeer		2181	Internal	hbase. zookeeper. property. clientPort	HBase-managed ZooKeeper mode
	HQuorumPeer		2888	Internal	hbase. zookeeper. peerport	HBase-managed ZooKeeper mode
	HQuorumPeer		3888	Internal	hbase. zookeeper. leaderport	HBase-managed ZooKeeper mode
	REST	Non- Cloudera Manager - managed	8080	External	hbase.rest.port	The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.
	REST	Cloudera Manager - managed	20550	External	hbase.rest.port	The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.
	REST UI		8085	External
	Thrift Server	Thrift Server	9090	External	Pass `-p <port>` on CLI
	Thrift Server		9095	External
		Avro server	9090	External	Pass `--port <port>` on CLI
	hbase-solr-indexer	Lily Indexer	11060	External
Hive	Metastore		9083	External
	HiveServer2		10000	External	hive.server2.thrift.port	The Beeline command interpreter requires that you specify this port on the command line. If you use Oracle database, you must manually reserve this port. For more information, see Reserving Ports for HiveServer 2.
	HiveServer2 Web User Interface (UI)		10002	External	hive. server2. webui.port in hive-site.xml
	WebHCat Server		50111	External	templeton.port
Hue	Server		8888	External
Oozie	Oozie Server		11000	External	OOZIE_HTTP_PORT in oozie-env.sh	HTTP
	Oozie Server	SSL	11443	External		HTTPS
	Oozie Server		11001	localhost	OOZIE_ADMIN_PORT in oozie-env.sh	Shutdown port
Sentry	Sentry Server		8038	External	sentry.service. server.rpc-port
	Sentry Server		51000	External	sentry.service. web.port
Spark	Default Master RPC port		7077	External
	Default Worker RPC port		7078	External
	Default Master web UI port		18080	External
	Default Worker web UI port		18081	External
	History Server		18088	External	history.port
	Shuffle service		7337	Internal
Sqoop	Metastore		16000	External	sqoop. metastore. server.port
Sqoop 2	Sqoop 2 server		8005	Localhost	`SQOOP_ADMIN_PORT` environment variable
	Sqoop 2 server		12000	External
	Sqoop 2		12001	External		Admin port
ZooKeeper	Server (with CDH 5 or Cloudera Manager 5)		2181	External	clientPort	Client port
	Server (with CDH 5 only)		2888	Internal	X in server.N =host:X:Y	Peer
	Server (with CDH 5 only)		3888	Internal	X in server.N =host:X:Y	Peer
	Server (with CDH 5 and Cloudera Manager 5)		3181	Internal	X in server.N =host:X:Y	Peer
	Server (with CDH 5 and Cloudera Manager 5)		4181	Internal	X in server.N =host:X:Y	Peer
	ZooKeeper JMX port		9010	Internal		ZooKeeper will also use another randomly selected port for RMI. To allow Cloudera Manager to monitor ZooKeeper, you must do one of the following: Open up all ports when the connection originates from the Cloudera Manager Server Do the following: Open a non-ephemeral port (such as 9011) in the firewall. Install Oracle Java 7u4 JDK or higher. Add the port configuration to the advanced configuration snippet, for example: -Dcom.sun.management. jmxremote.rmi.port=9011 Restart ZooKeeper.

Ports Used by Cloudera Navigator Encryption

Ports Used by Impala