Clearwater IP Port Usage

The nodes in Clearwater attempt talk to each other over IP. This document lists the ports that are used by a deployment of Clearwater.

All nodes

All nodes need to allow the following ICMP messages:

Echo Request
Echo Reply
Destination Unreachable

They also need the following ports open to the world (0.0.0.0/0):

TCP/22 for SSH access

If your deployment uses SNMP monitoring software (cacti for example), each node will also have to open appropriate ports for this service.

  • SNMP

    UDP/161-162
    

If your deployment uses our automatic clustering and configuration sharing feature, open the following ports between every node

  • etcd

    TCP/2380
    TCP/4000
    

All-in-one

All-in-one nodes need the following ports opened to the world

  • Web UI

    TCP/80
    TCP/443
    
  • STUN signaling:

    TCP/3478
    UDP/3478
    
  • SIP signaling:

    TCP/5060
    UDP/5060
    TCP/5062
    
  • RTP forwarding:

    UDP/32768-65535
    

Ellis

The Ellis node needs the following ports opened to the world:

  • Web UI

    TCP/80
    TCP/443
    

Bono

The Bono nodes need the following ports opened to the world:

  • STUN signaling:

    TCP/3478
    UDP/3478
    
  • SIP signaling:

    TCP/5060
    UDP/5060
    TCP/5062
    
  • RTP forwarding:

    UDP/32768-65535
    

They also need the following ports open to all other Bono nodes and to all the Sprout nodes:

  • Internal SIP signaling:

    TCP/5058
    

Sprout

The Sprout nodes need the following ports open to all Bono nodes:

  • Internal SIP signaling:

    TCP/5054
    TCP/5052
    

They also need the following ports opened to all other Sprout nodes:

  • Shared registration store:

    For releases using a memcached store - that is all releases up to release 28 (Lock, Stock and Two Smoking Barrels) and from release 32 (Pulp Fiction) onwards

    TCP/11211
    
  • Chronos:

    TCP/7253
    
  • Cassandra (if including a Memento AS):

    TCP/7000
    TCP/9160
    

They also need the following ports opened to all homestead nodes:

  • Registration Termination Requests (if using an HSS):

    TCP/9888
    

They also need the following ports opened to the world:

  • HTTP interface (if including a Memento AS):

    TCP/443
    

Homestead

The Homestead nodes need the following ports open to all the Sprout nodes and the Ellis node:

  • RESTful interface:

    TCP/8888
    

They also need the following ports open to just the Ellis node:

  • RESTful interface:

    TCP/8889
    

They also need the following ports opened to all other Homestead nodes:

  • Cassandra:

    TCP/7000
    

They also need the following ports opened to the world:

Homer

The Homer nodes need the following ports open to all the Sprout nodes and the Ellis node:

  • RESTful interface:

    TCP/7888
    

They also need the following ports opened to all other Homer nodes:

  • Cassandra:

    TCP/7000
    

They also need the following ports opened to the world:

Ralf

The Ralf nodes need the following ports open to all the Sprout and Bono nodes:

  • RESTful interface:

    TCP/10888
    

They also need to following ports open to all other Ralf nodes:

  • Chronos:

    TCP/7253
    
  • Memcached:

    TCP/11211
    

Standalone Application Servers

Standalone Project Clearwater application servers (e.g. Memento and Gemini) need the following ports open to all Sprout nodes:

  • SIP signaling:

    TCP/5054
    

They also need the following ports open to all other standalone application servers (if they include a Memento AS):

  • Cassandra:

    TCP/7000
    TCP/9160
    

They also need the following ports open to all Homestead nodes (if they include a Memento AS):

  • RESTful interface:

    TCP/11888
    

They also need the following ports opened to the world (if they include a Memento AS):

  • HTTP interface:

    TCP/443