• 1. Sensor
  • 1.1 Snort
• 2. Defense Center
  • 2.1 MQTT (Mosquitto)
  • 2.2 Confluent Platform (Kafka)
  • 2.3 Spark & KaspaCore
  • 2.4 Hadoop
  • 2.5 OLK (OpenSearch, Logstash & Kibana)

1. Sensor

1.1 Snort

Domain	Product	Service	Range	Port	Remarks
Docker	Snort API	REST API	public	5000	REST API
Docker	Supervisor	supervisord	local	9001

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

2. Defense Center

2.1 MQTT (Mosquitto)

Domain	Product	Service	Range	Port	Remarks
Host	Mosquitto	MQTT Broker	public	1883

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

2.2 Confluent Platform (Kafka)

Domain	Product	Service	Range	Port	Remarks
Docker	Kafka Broker	Kafka Broker	public	9092
Docker	Kafka Broker	Kafka Broker	docker	29092
Docker	Kafka Broker	JMX	public	9101
Docker	Schema Registry	Schema Registry	public	8081
Docker	Kafka Connect	Kafka Connect	public	8083
Docker	REST Proxy	REST Proxy	public	8082	REST API
Docker	KSQL Server	KSQL Server	public	8088
Docker	Control Center	Control Center	public	9021	WEB UI
Docker	ZooKeeper	ZooKeeper	public	2181

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

2.3 Spark & KaspaCore

Domain	Product	Service	Range	Port	Remarks
Host	Spark	Spark Master	local	7077
Host	Spark	Spark Master WEB UI	public	8080	WEB UI
Host	Spark	Spark Worker	public	random
Host	Spark	Spark Worker WEB UI	public	8084	WEB UI, The default port is 8081. However, 8084 is set because 8081 to 8083 were occupied by others.
Host	Spark	Spark Application WEB UI	public	4040, 4041, …	WEB UI, In case multiple application are running on the same host
Host	Spark	Spark Driver	public	random

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

2.4 Hadoop

Domain	Product	Service	Range	Port	Remarks
Host	HDFS	NameNode WEB UI	public	9870	WEB UI
Host	HDFS	DataNode WEB UI	public	9864	WEB UI
Host	HDFS	NameNode	public	9000
Host	HDFS	DataNode for Data Transfer	public	9866
Host	HDFS	DataNode for IPC	public	9867
Host	HDFS	Secondary NameNode WEB UI	public	9868	WEB UI

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

2.5 OpenSearch (ElasticSearch fork), Logstash, Kibana

Domain	Product	Service	Range	Port	Remarks
Docker	OpenSearch	REST API	public	9200	REST API
Docker	OpenSearch	Node	public	9300
Docker	Logstash	REST API	public	9600	REST API
Docker	Logstash	TCP Input	public	5000
Docker	Logstash	Beats Input	public	5044

Range: public = external publishing, docker = valid only within Docker, local = valid only on localhost

>> Back to HOME