Ports Used by CDH Components

All ports listed are TCP.

In the following tables, Internal means that the port is used only for communication among the components; External means that the port can be used for either internal or external communication.

External Ports
Component Service Port Configuration Comment
Apache Hadoop HDFS DataNode

9866

dfs.datanode.address

DataNode HTTP server port

1004

dfs.datanode.address  

9864

dfs.datanode.http.address  

9865

dfs.datanode.https.address  

1006

dfs.datanode.http.address  

9867

dfs.datanode.ipc.address  
NameNode

8020

fs.default.name or fs.defaultFS

fs.default.nameis deprecated (but still works)

8022

dfs.namenode. servicerpc-address

Optional port used by HDFS daemons to avoid sharing the RPC port used by clients (8020). Cloudera recommends using port 8022.

9870

dfs.http.address or dfs.namenode.http-address

dfs.http.addressis deprecated (but still works)

9871

dfs.https.address or dfs.namenode.https-address

dfs.https.addressis deprecated (but still works)

NFS gateway

2049

 

nfs port (nfs3.server.port

4242

 

mountd port (nfs3.mountd.port

111

 

portmapperorrpcbindport

50079 nfs.http.port The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
50579 nfs.https.port The NFS gateway daemon uses this port to serve metrics. The port is configurable on versions 5.10 and higher.
HttpFS

14000

   

14001

   
Apache Hadoop YARN (MRv2) ResourceManager

8032

yarn. resourcemanager. address  

8033

yarn. resourcemanager. admin.address  

8088

yarn. resourcemanager. webapp.address  

8090

yarn. resourcemanager. webapp.https.address  
NodeManager

8042

yarn. nodemanager. webapp.address  

8044

yarn. nodemanager. webapp.https.address  
JobHistory Server

19888

mapreduce. jobhistory. webapp.address  

19890

mapreduce. jobhistory. webapp.https.address  

ApplicationMaster

   

The ApplicationMaster serves an HTTP service using an ephemeral port that cannot be restricted. This port is never accessed directly from outside the cluster by clients. All requests to the ApplicationMaster web server is routed using the YARN ResourceManager (proxy service). Locking down access to ephemeral port ranges within the cluster's network might restrict your access to the ApplicationMaster UI and its logs, along with the ability to look at running applications.

Apache Flume

Flume Agent

41414

   
Apache Hadoop KMS Key Management Server

16000

kms_http_port

Applies to both Java KeyStore KMS and Key Trustee KMS.

Apache HBase Master

16000

hbase.master. port

IPC

16010

hbase.master. info.port

HTTP

RegionServer

16020

hbase. regionserver. port

IPC

16030

hbase. regionserver. info.port

HTTP

REST

20550

hbase.rest.port

The default REST port in HBase is 8080. Because this is a commonly used port, Cloudera Manager sets the default to 20550 instead.

REST UI

8085

   
Thrift Server

9090

Pass -p <port> on CLI

 
Thrift Server

9095

   
 

9090

Pass --port <port> on CLI

 
Lily HBase Indexer 11060    
Apache Hive Metastore

9083

   
HiveServer2

10000

hive. server2. thrift.port

The Beeline command interpreter requires that you specify this port on the command line.

If you use Oracle database, you must manually reserve this port. For more information, see Reserving Ports for HiveServer 2.

HiveServer2 Web User Interface (UI)

10002

hive. server2. webui.port in hive-site.xml

 
WebHCat Server

50111

templeton.port

 
Apache Hue Server

8888

   
Load Balancer

8889

   
Apache Impala Impala Daemon 21000   Used to transmit commands and receive results by impala-shell and version 1.2 of the Cloudera ODBC driver.
21050   Used to transmit commands and receive results by applications, such as Business Intelligence tools, using JDBC, the Beeswax query editor in Hue, and version 2.0 or higher of the Cloudera ODBC driver.
25000   Impala web interface for administrators to monitor and troubleshoot.
StateStore Daemon 25010   StateStore web interface for administrators to monitor and troubleshoot.
Catalog Daemon 25020   Catalog service web interface for administrators to monitor and troubleshoot.
Apache Kafka Broker

9092

port The primary communication port used by producers and consumers; also used for inter-broker communication.

9093

ssl_port A secured communication port used by producers and consumers; also used for inter-broker communication.
Apache Kudu Master

7051

  Kudu Master RPC port

8051

  Kudu Master HTTP server port
TabletServer

7050

 

Kudu TabletServer RPC port

8050

Kudu TabletServer HTTP server port

Apache Oozie Oozie Server

11000

OOZIE_HTTP_PORT in oozie-env.sh

HTTP

11443

 

HTTPS

Apache Sentry Sentry Server

8038

sentry.service. server.rpc-port

 

51000

sentry.service. web.port

 
Apache Solr Solr Server 8983   HTTP port for all Solr-specific actions, update/query.
8985   HTTPS port for all Solr-specific actions, update/query.
Apache Spark

Default Master RPC port

7077

   

Default Worker RPC port

7078

   

Default Master web UI port

18080

   

Default Worker web UI port

18081

   

History Server

18088

history.port

 
Apache Sqoop

Metastore

16000

sqoop. metastore. server.port  
Apache ZooKeeper

Server (with CDH or Cloudera Manager)

2181

clientPort

Client port

Internal Ports
Component Service Port Configuration Comment
Apache Hadoop HDFS Secondary NameNode

9868

dfs.secondary.http.address or dfs.namenode. secondary. http-address

dfs.secondary.http.addressis deprecated (but still works)

9869

dfs.secondary.https.address  
JournalNode

8485

dfs.namenode. shared.edits.dir  

8480

dfs.journalnode. http-address

 

8481

dfs.journalnode. https-address

 

Failover Controller

8019

 

Used for NameNode HA

Apache Hadoop YARN (MRv2) ResourceManager

8030

yarn.resourcemanager.scheduler.address
 

8031

yarn. resourcemanager. resource-tracker. address  
NodeManager

8040

yarn. nodemanager. localizer. address  

8041

yarn. nodemanager. address  
JobHistory Server

10020

mapreduce. jobhistory. address  

10033

mapreduce. jobhistory.admin. address  

Shuffle HTTP

13562

mapreduce.shuffle.port  
Apache Hadoop KMS Key Management Server

16001

kms_admin_port

Applies to both Java KeyStore KMS and Key Trustee KMS.

Apache HBase HQuorumPeer

2181

hbase. zookeeper. property. clientPort

HBase-managed ZooKeeper mode

2888

hbase. zookeeper. peerport

HBase-managed ZooKeeper mode

3888

hbase. zookeeper. leaderport

HBase-managed ZooKeeper mode

Apache Impala Impala Daemon 22000   Internal use only. Impala daemons use this port to communicate with each other.
23000   Internal use only. Impala daemons listen on this port for updates from the statestore daemon.
StateStore Daemon 24000   Internal use only. The statestore daemon listens on this port for registration/unregistration requests.
Catalog Daemon 23020   Internal use only. The catalog daemon listens on this port for updates from the statestore daemon.
26000   Internal use only. The catalog service uses this port to communicate with the Impala daemons.
Apache Kafka Broker

9092

port The primary communication port used by producers and consumers; also used for inter-broker communication.

9093

ssl_port A secured communication port used by producers and consumers; also used for inter-broker communication.

9393

jmx_port Internal use only. Used for administration via JMX.

9394

kafka.http.metrics.port Internal use only. This is the port via which the HTTP metric reporter listens. It is used to retrieve metrics through HTTP instead of JMX.
MirrorMaker

24042

jmx_port Internal use only. Used to administer the producer and consumer of the MirrorMaker.
Apache Spark Shuffle service 7337    
Apache ZooKeeper

Server (with CDH only)

2888

X in server.N =host:X:Y

Peer

Server (with CDH only)

3888

X in server.N =host:X:Y

Peer

Server (with CDH and Cloudera Manager)

3181

X in server.N =host:X:Y

Peer

Server (with CDH and Cloudera Manager)

4181

X in server.N =host:X:Y

Peer

ZooKeeper JMX port

9010

 
ZooKeeper will also use another randomly selected port for RMI. To allow Cloudera Manager to monitor ZooKeeper, you must do one of the following:
  • Open up all ports when the connection originates from the Cloudera Manager Server
  • Do the following:
    1. Open a non-ephemeral port (such as 9011) in the firewall.
    2. Install Oracle Java 7u4 JDK or higher.
    3. Add the port configuration to the advanced configuration snippet, for example: -Dcom.sun.management. jmxremote.rmi.port=9011
    4. Restart ZooKeeper.