Used Ports¶
Inbound Connections¶
Port List¶
For a single server installation fewer outbound connections are needed. The services communicate within the same server. In a cluster installation, services need to communicate between the different Output Engine servers. Thus all service ports have to be open as well.
Single Server Installation¶
| Port | Service | Transfer Protocol | Application Protocol | Comment |
|---|---|---|---|---|
| 443 | seal-ipp-checkin | tcp | HTTPS | Job acceptance via IPPS |
| 515 | seal-checkin | tcp | LPR | Job acceptance via LPR |
| 631 | seal-ipp-checkin | tcp | HTTP | Job acceptance via IPP |
| 1948 | seal-checkin | tcp | HTTPS | Prometheus metrics; needed if monitoring is used |
| 2119 | seal-mainland-checkout | tcp | HTTPS | Port the island-checkouts can connect to; needed if remote printing is used |
| 2129 | seal-convert-dpf | tcp | HTTPS | Port for callback from DPF; needed if conversion via DPF is used |
| 5601 | Kibana | tcp | HTTP | GUI for visualising the log data |
| 8080 | seal-rest | tcp | HTTPS | REST API; needed if PLOSSYS CLI or other programs like APW or easyPRIMA will access the REST API from the outside |
| 8081 | seal-job-notifier | tcp | HTTP | PLOSSYS Infoclient API |
| 8082 | seal-job-notifier | tcp | HTTPS | PLOSSYS Infoclient API |
| 9000 | PLOSSYS Administrator | tcp | HTTPS | Output Engine GUI |
| 32769 | seal-keycloak | tcp | HTTPS | OIDC identity provider (optional) |
Cluster Installation¶
| Port | Service | Transfer Protocol | Application Protocol | Comment |
|---|---|---|---|---|
| 53 | Consul | tcp/udp | DNS | DNS service discovery |
| 443 | seal-ipp-checkin | tcp | HTTPS | Job acceptance via IPPS |
| 515 | seal-checkin | tcp | LPR | Job acceptance via LPR |
| 631 | seal-ipp-checkin | tcp | HTTP | Job acceptance via IPP |
| 1898 | seal-error-sheet | tcp | HTTPS | |
| 1908 | seal-convert-ps2pdf | tcp | HTTPS | |
| 1918 | seal-convert-pdfstamp | tcp | HTTPS | |
| 1928 | seal-convert-pdf2ps | tcp | HTTPS | |
| 1938 | seal-convert-sapgof | tcp | HTTPS | |
| 1948 | seal-checkin | tcp | HTTPS | Prometheus metrics; needed if monitoring is used |
| 1958 | seal-convert-dispatcher | tcp | HTTPS | |
| 1969 | seal-controller | tcp | HTTPS | HTTP streaming |
| 1978 | seal-ghost | tcp | HTTPS | HTTP streaming |
| 1988 | seal-bodyscanner | tcp | HTTPS | HTTP streaming |
| 1998 | seal-checkout | tcp | HTTPS | HTTP streaming |
| 2008 | seal-printer-monitor | tcp | HTTPS | HTTP streaming |
| 2018 | seal-print-preview | tcp | HTTPS | HTTP streaming |
| 2028 | seal-copier | tcp | HTTPS | HTTP streaming |
| 2038 | seal-convert-sapwin | tcp | HTTPS | HTTP streaming |
| 2048 | seal-out-ngn-accounting | tcp | HTTPS | HTTP streaming |
| 2058 | seal-virtual-queues | tcp | HTTPS | HTTP streaming |
| 2068 | seal-out-ngn-message-relay | tcp | HTTPS | HTTP streaming |
| 2078 | seal-pjl-checkout | tcp | HTTPS | HTTP streaming |
| 2088 | seal-convert-pdfscale | tcp | HTTPS | HTTP streaming |
| 2098 | seal-co-notifier | tcp | HTTPS | SAP and IPP notifications |
| 2108 | seal-convert-tiff2pdf | tcp | HTTPS | |
| 2118 | seal-mainland-checkout | tcp | HTTPS | Internal port for job processing; needed if remote printing is used |
| 2119 | seal-mainland-checkout | tcp | HTTPS | Port the island-checkouts can connect to; needed if remote printing is used |
| 2128 | seal-convert-dpf | tcp | HTTPS | needed if conversion via DPF is used |
| 2129 | seal-convert-dpf | tcp | HTTPS | Port for callback from DPF; needed if conversion via DPF is used |
| 2138 | seal-convert-pdfprae | tcp | HTTPS | |
| 2198 | seal-housekeeper | tcp | HTTPS | |
| 4222 | SEAL NATS | tcp | HTTP(S) | SEAL NATS client access |
| 5601 | Kibana | tcp | HTTP | GUI for visualising the log data |
| 6222 | SEAL NATS | tcp | HTTP(S) | SEAL NATS communication in cluster |
| 8080 | seal-rest | tcp | HTTPS | REST API |
| 8081 | seal-job-notifier | tcp | HTTP | PLOSSYS Infoclient API |
| 8082 | seal-job-notifier | tcp | HTTPS | PLOSSYS Infoclient API |
| 8300 | Consul | tcp | RPC | Server RPC |
| 8301 | Consul | tcp/udp | Serf LAN | Serf LAN |
| 8302 | Consul | tcp/udp | Serf WAN | Serf WAN |
| 8400 | Consul | tcp | RPC | Client RPC |
| 8500 | Consul | tcp | HTTPS | Consul Administrator GUI |
| 9000 | PLOSSYS Administrator | tcp | HTTPS | Output Engine GUI |
| 9200 | Elasticsearch | tcp | HTTP(S) | Log database REST API |
| 9300 | Elasticsearch | tcp | Binary | Communication in cluster mode |
| 27017 | MongoDB | tcp | MongoDB-specific binary | Database |
| 32769 | seal-keycloak | tcp | HTTPS | OIDC identity provider (optional) |