10.9. Configuring JBoss for use Behind a Firewall

JBoss comes with many socket based services that open listening ports. In this section we list the services that open ports that might need to be configured to work when accessing JBoss behind a firewall. The following table shows the ports, socket type, associated service for the services in the default configuration file set. Table 10.2, “Additional ports in the all configuration” shows the same information for the additional ports that exist in the all configuration file set.

Table 10.1. The ports found in the default configuration

Port Type Service
1098 TCP org.jboss.naming.NamingService
1099 TCP org.jboss.naming.NamingService
3873 TCP org.jboss.remoting.transport.Connector (EJB3)
4444 TCP org.jboss.invocation.jrmp.server.JRMPInvoker
4445 TCP org.jboss.invocation.pooled.server.PooledInvoker
4446 TCP org.jboss.remoting.transport.Connector (UnifiedInvoker)
8009 TCP org.jboss.web.tomcat.service.JBossWeb
8080 TCP org.jboss.web.tomcat.service.JBossWeb
8083 TCP org.jboss.web.WebService
8093 TCP org.jboss.mq.il.uil2.UILServerILService

Table 10.2. Additional ports in the all configuration

Port Type Service Notes
1100 TCP org.jboss.ha.jndi.HANamingService  
1101 TCP org.jboss.ha.jndi.HANamingService  
1102 UDP org.jboss.ha.jndi.HANamingService  
1161 UDP org.jboss.jmx.adaptor.snmp.agent.SnmpAgentService Plus one additional anonymous UDP port which does not support configuration the port.
1162 UDP org.jboss.jmx.adaptor.snmp.trapd.TrapdService  
3528 TCP org.jboss.invocation.iiop.IIOPInvoker  
4447 TCP org.jboss.invocation.jrmp.server.JRMPInvokerHA  
43333 UDP org.jboss.cache.TreeCache (EJB3Entity) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45551 UDP org.jboss.cache.TreeCache (EJB3SFSB) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45566 UDP org.jboss.ha.framework.server.ClusterPartition Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45577 UDP org.jboss.cache.TreeCache (JBossWebCluster) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.