Containers and orchestration ports

Overview

Container APIs are high-value targets because they can start workloads or read secrets. Keep them on a private network and require mutual TLS or strong authentication.

Ports in this category10
Range coveredAll registry ranges

All Containers and orchestration port numbers

Every port below is assigned to this category in the registry or by a widely used convention. Open a port for its check and block commands, risk rating and troubleshooting notes.

PortServiceTransportRiskDescription
1775 VDAB TCP Standard/Low data interchange between visual processing containers
2375 DOCKER TCP High Docker REST API (plain text)
2376 DOCKER-S TCP Medium Docker REST API (ssl)
2377 SWARM TCP Standard/Low RPC interface for Docker Swarm
2379 ETCD-CLIENT TCP High etcd client communication
2380 ETCD-SERVER TCP High etcd server to server communication
4665 CONTCLIENTMS TCP / UDP Standard/Low Container Client Message Service
5638 FLCRS TCP Standard/Low Symantec Fingerprint Lookup and Container Reference Service
6443 KUBERNETES API TCP / UDP Medium Service Registry Default HTTPS Domain
10250 KUBERNETES KUBELET TCP High Kubernetes kubelet HTTPS API port on each node (community convention; not IANA-assigned)

Search all PortAtlas ports

Primary data: IANA Service Name and Transport Protocol Port Number Registry, plus clearly marked community conventions.

Last reviewed 2026-10-30 · Methodology · About · Privacy