Ports and firewall configuration
These are the main ports used by Spotfire. The following table indicates their function, the default port number, firewall requirements and, for internal ports, how to change the port when Spotfire has already been installed and configured.
Ports through which Spotfire receives communication (inbound ports) must be opened in any active firewall.
Ports through which Spotfire sends communication (outbound ports) are open by default unless they match a firewall rule that blocks them.
Internal ports
The following ports are used for communication between Spotfire components.
| Name of port | Function | Default | Firewall requirements | How to change port |
|---|---|---|---|---|
| Public HTTP port | Used for non-secure communication with installed and web clients. | 80 | On computers running Spotfire Server, these ports must be open.
Computers running Spotfire Analyst and web browser clients must have access to these ports. Proxies, and load balancers in front of servers, also require access to these ports. |
In the
server.xml file, edit the relevant
Connector port parameter.
For general instructions, see Manually editing the server.xml file. |
| HTTPS connector port | Used for secure communication with installed and web clients. | 443 | ||
| Server back-end registration port | Used for setting up trust between the Spotfire Server and nodes. | 9080 | On computers running Spotfire Server, these ports must be open.
Computers running node managers must have access to these ports. |
|
| Server back-end communication port | Spotfire Server listens to secure traffic from services on the nodes.
Used for secure traffic between nodes. |
9443 | ||
| Node manager registration port | Used for setting up trust between node managers and Spotfire Server. | 9080 | On computers running node manager, these ports must be open.
Computers running Spotfire Server must have access to these ports. |
Edit the following file: <node manager installation dir>\nm\config\nodemanager.properties |
| Node manager communication port | Used for secure communication within the environment. | 9443 | ||
| Service communication port | Used by Spotfire Web Player instances and Automation Services instances for secure communication and basic functionality. | 9501 | In Spotfire Server, in the Nodes & Services area, on the "Your network" page, select a service instance on the left, and then click Edit in the upper-right pane. | |
| TERR service communication port | Used by the TERR service for secure communication and basic functionality. | 9502 | ||
| Clustering port | Used for secure communication within the environment. This port is the same for all servers in the cluster. | 5701 | These ports must be open between all the Spotfire Servers in the cluster. | Use the Spotfire configuration tool to change the port for the clustered servers.
On the Configuration page, click Clustering in the left pane. |
| Second clustering port | A second clustering port, used by Apache Ignite. | 5702 | ||
| JMX RMI port | If JMX RMI access is enabled, Spotfire Server opens a separate port for this purpose. | 1099 | Computers running monitoring clients must have access to this port. | Use the config-jmx command. |
Outbound ports on the server
Spotfire Server uses the following ports to communicate with programs outside of Spotfire. To facilitate this communication, firewalls must allow outgoing traffic through these ports.