10.9. Configuring JBoss for use Behind a Firewall

JBoss comes with many socket based services that open listening ports. In this section we list the services that open ports that might need to be configured to work when accessing JBoss behind a firewall. The following table shows the ports, socket type, associated service for the services in the default configuration file set. Table 10.2, “Additional ports in the all configuration” shows the same information for the additional ports that exist in the all configuration file set.

Table 10.1. The ports found in the default configuration

Port Type Service Notes
1098 TCP org.jboss.naming.NamingService  
1099 TCP org.jboss.naming.NamingService  
3873 TCP org.jboss.remoting.transport.Connector (EJB3)  
4444 TCP org.jboss.invocation.jrmp.server.JRMPInvoker  
4445 TCP org.jboss.invocation.pooled.server.PooledInvoker  
4446 TCP org.jboss.remoting.transport.Connector (UnifiedInvoker)  
4457 TCP org.jboss.remoting.transport.Connector (Messaging) Plus one additional anonymous TCP port. You can specify fixed port number via the secondaryBindPort parameter in the deploy/jboss-messaging.sar/remoting-bisocket-service.xml file.
8009 TCP org.jboss.web.tomcat.service.JBossWeb  
8080 TCP org.jboss.web.tomcat.service.JBossWeb  
8083 TCP org.jboss.web.WebService  

Table 10.2. Additional ports in the all configuration

Port Type Service Notes
1100 TCP org.jboss.ha.jndi.HANamingService  
1101 TCP org.jboss.ha.jndi.HANamingService  
1102 UDP org.jboss.ha.jndi.HANamingService  
1161 UDP org.jboss.jmx.adaptor.snmp.agent.SnmpAgentService Plus one additional anonymous UDP port which does not support configuration the port.
1162 UDP org.jboss.jmx.adaptor.snmp.trapd.TrapdService  
3528 TCP org.jboss.invocation.iiop.IIOPInvoker  
4447 TCP org.jboss.invocation.jrmp.server.JRMPInvokerHA  
7900 TCP org.jboss.messaging.core.jmx.MessagingPostOfficeService (Messaging, DataChannel) Plus one additional anonymous TCP port. It can be set using the FD_SOCK.start_port parameter.
43333 UDP org.jboss.cache.TreeCache (EJB3Entity) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45551 UDP org.jboss.cache.TreeCache (EJB3SFSB) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45566 UDP org.jboss.ha.framework.server.ClusterPartition Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45567 UDP org.jboss.messaging.core.jmx.MessagingPostOfficeService (Messaging, DataChannel MPING)  
45568 UDP org.jboss.messaging.core.jmx.MessagingPostOfficeService (Messaging, ControlChannel) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.
45577 UDP org.jboss.cache.TreeCache (JBossWebCluster) Plus one additional anonymous UDP port for unicast and one additional anonymous TCP port. The UDP port can be set using the rcv_port parameter and the TCP port can be set using the FD_SOCK.start_port parameter.