- Security >
- Firewall Configuration
Firewall Configuration¶
On this page
Overview¶
Ops Manager components use the default ports and health-check endpoints described here.
Ports¶
Although the following components are logically distinct, the Ops Manager HTTP Service and Backup HTTP Service are part of the Ops Manager Application and typically run on a single system. The Backup Daemon typically runs on a distinct system.
Ops Manager HTTP Service¶
-
8080 Web server, available from browsers. The system running the Monitoring Agent must be able to access this port as well.
Backup HTTP Service¶
-
8081 Available from browsers for HTTP restores, and from systems running the Backup Agent.
-
8091 Optional
Used for internal diagnostics. Only available on the localhost interface.
Backup Daemon¶
-
8640 A “kill-port” that the control script uses to signal a shutdown.
Only available on the localhost interface.
-
27500-27503 The Backup Daemon uses this port range to on the localhost interface to run mongod instances to apply oplog entries to maintain the local copies of the backed up database.
-
8090 Optional
Used for internal diagnostics. Only available on the localhost interface.
Monitoring HTTP Endpoints¶
Ops Manager provides health-check endpoints for the monitoring of the
Ops Manager components via a standard monitoring service, such as Zabbix or
Nagios. These endpoints are only accessible on the localhost interface.
Backup HTTP Service Endpoint¶
The Backup HTTP Service on the Ops Manager Application exposes the following endpoint:
The endpoint checks the connections from the service to the Ops Manager Application Database and the Backup Database.
A successful response from the endpoint returns the following:
Backup Daemon Endpoint¶
The Backup Daemon on the Backup Daemon server exposes a health-check endpoint at: