Cloud Controller Network Communications

This topic describes Cloud Controller internal network communication paths with other Elastic Runtime components.

Inbound Communications

The following table lists network communication paths that are inbound to the Cloud Controller.

Source VM Destination VM Port Protocol Security and Authentication
cloud_controller cloud_controller (Routing API) 443 HTTPS OAuth
diego_brain cloud_controller 9022 HTTP Basic authentication
diego_brain (SSH Proxy) cloud_controller 9022 HTTP OAuth
diego_cell (Rep) cloud_controller 9022 HTTP None
diego_database (BBS) cloud_controller 9022 HTTP Basic authentication
doppler (Syslog Drain Binder) cloud_controller 9023 HTTPS Mutual TLS
loggregator_trafficcontroller cloud_controller 443 HTTPS OAuth
router cloud_controller 9022 HTTP OAuth

Outbound Communications

The following table lists network communication paths that are outbound from the Cloud Controller.

Source VM Destination VM Port Protocol Security and Authentication
cloud_controller diego_brain (Nsync) 8787 HTTP None
cloud_controller diego_brain (Stager) 8888 HTTP None
cloud_controller diego_brain (TPS Listener) 1518 HTTP None
cloud_controller mysql_proxy* 3306 MySQL MySQL authentication
cloud_controller nfs_server or other blobstore 4443 HTTPS TLS and basic authentication
cloud_controller uaa 8443 HTTPS OAuth or none
cloud_controller (Route Registrar) nats 4222 NATS Basic authentication
cloud_controller (Routing API) diego_database (Locket) 8891 HTTPS Mutual TLS
cloud_controller_worker mysql_proxy* 3306 MySQL MySQL authentication
cloud_controller_worker nfs_server or other blobstore 4443 HTTPS TLS and basic authentication
clock_global mysql_proxy* 3306 MySQL MySQL authentication

*Applies only to deployments where internal MySQL is selected as the database.

The destination depends on your file storage or blobstore configuration.

The authentication method depends on the type of request.

Consul Communications

ERT components call out to Consul for service discovery. For more information, see Consul Network Communications.

Create a pull request or raise an issue on the source for this page in GitHub