표준 Port 목록
아래 table은 Enterprise New six-VM offline deployment를 기준으로 합니다. customer firewall은 최소한으로 필요한 source range에서 오는 traffic만 허용해야 합니다. 이 port들을 public internet에 직접 노출하지 마세요.
| Source | Target | Port | Protocol | Purpose |
|---|---|---|---|---|
| Control host | Six target VMs | 22 | TCP | SSH / Ansible |
| 3개 application node 상호 간 | 3개 application node | 2377 | TCP | Docker Swarm management plane |
| 3개 application node 상호 간 | 3개 application node | 7946 | TCP/UDP | Swarm node discovery |
| 3개 application node 상호 간 | 3개 application node | 4789 | UDP | Swarm overlay |
| 3개 application node | Active application node | 8088 | TCP | HAProxy to Enterprise New backend; application network segment only |
| Business network segment | APP VIP | 80 | TCP | Platform HTTP entry, /healthz, /readyz |
| Business network segment | APP VIP / active application node | 1883 | TCP | MQTT |
| Business network segment | APP VIP / active application node | 8883 | TCP | MQTT TLS |
| Business network segment | APP VIP / active application node | 8083 | TCP | MQTT WebSocket |
| Business network segment | APP VIP / active application node | 8084 | TCP | MQTT WebSocket TLS |
| Business network segment | APP VIP / active application node | 4840 | TCP | OPC UA Server |
| Controlled application network segment | Active application node | 8089 | TCP | Launchpad |
| Dynamic app access network segment | Active application node | 30000-30199 | TCP | App Gateway / dynamic application host ports |
| Application nodes, DB nodes, witness | DB VIP / DB nodes | 5432 | TCP | PostgreSQL / TimescaleDB |
| DB1, DB2, witness | DB1, DB2, witness | 5432 | TCP | Streaming replication / repmgr |
| Application nodes | NFS server | 2049 | TCP/UDP | NFS_ENABLED=true일 때 사용 |
현재 compose deployment는 Redis, SourceFlow, EventFlow, Marimo, EMQX Dashboard를 외부에 노출하지 않습니다. 이러한 service는 Docker runtime network 안에서 backend에 의해서만 호출됩니다.