Configure network ports

If you are using a *network firewall* or host-based firewall (e.g. iptables), you may need to change your firewall configuration to open ports that Server Backup Manager uses for network communication.

h3. Licensing Server Network Ports


h5. Input:

* allow TCP packets *from* activation.r1soft.com port 443 *to* Server Backup port range 1024-65535

h3. Backup Manager Web Interface Network Ports


h5. Input:

* allow TCP packets *from* any port *to* the Backup Manager port 80
* allow TCP packets *from* any port *to* the Backup Manager port 443

h5. Output:

* allow TCP packets *from* the Backup Manager port 80 *to* any port range 1024-65535
* allow TCP packets *from* the Backup Manager port 443 *to* any port range 1024-65535{info:title=Notes}
* To access your Backup Manager's web interface, you will need to allow network traffic to the Backup Managers IP address, TCP port 80 for HTTP traffic, and TCP port 443 for HTTPS traffic.
* HTTP and HTTPS ports are configurable. "80" and "443" are the default values. If you change the ports, do not forget to change your firewall configuration to reflect the changes.{info}

----
h3. API Server Network Ports


h5. Input:

* allow TCP packets *from* any port *to* the Backup Manager port 9080
* allow TCP packets *from* any port *to* the Backup Manager port 9443

h5. Output:

* allow TCP packets *from* the Backup Manager port 9080 *to* any port range 1024-65535
* allow TCP packets *from* the Backup Manager port 9443 *to* any port range 1024-65535{info:title=Notes}
* To access the API server, you will need to allow network traffic to the Backup Managers IP address,  TCP port 9080 for HTTP traffic, and TCP port 9443 for HTTPS traffic.
* HTTP and HTTPS ports are configurable. "9080" and "9443" are the default values. If you change the ports, do not forget to change your firewall configuration to reflect the changes. Read more in [ServerBackupManager:API Server Options].{info}


h3. Backup Manager to DCC Communication Port


h5. Input:

* allow TCP packets *from* any port *to* the Backup Manager port 5443

h5. Output:

* allow TCP packets *from* the Backup Manager port 5443 *to* any port range 1024-65535
----

h3. Backup Agent Network Ports


h4. Backup Agent to Backup Manager, Backup Manager to Backup Agent


h5. Input:

* allow TCP packets *from* any port 1167 *to* the Backup Manager port range 1024-65535

h5. Output:

* allow TCP packets *from* the Backup Manager port range 1024-65535 *to* any port 1167{info:title=Notes}
* You will need to allow your Backup Manager to open connections to each one of your Backup Agents on TCP port 1167.
* The Backup Agent port is configurable. "1167" is the default value. If you change the ports, do not forget to change your firewall configuration to reflect the changes. Read more in [ServerBackup:Configure Backup Agent port].{info}

----
h3. Data Center Console Network Ports


h5. Input:

* allow TCP packets from any to the Backup Manager port 8080
* allow TCP packets from any to the Backup Manager port 7443

h5. Output:

* allow TCP packets from Backup Manager port 8080 to any port range 1024-65535
* allow TCP packets from Backup Manager port 7443 to any port range 1024-65535


h5. Input:

* allow TCP packets *from* any port *to* the Backup Manager port 6443

h5. Output:

* allow TCP packets *from* the Backup Manager port 6443 *to* any port range 1024-65535


{info:title=Notes}
* You will need to allow your Data Center Console to open connections to each one of your Backup Managers to the Data Center Console IP address, TCP port 8080 for HTTP traffic, and TCP port 7443 for HTTPS traffic.
* The Data Center Console ports are configurable. "8080" and "7443" are the default value. If you change the ports, do not forget to change your firewall configuration to reflect the changes.
Read more in [ServerBackupManager:Configure Data Center Console].{info}



!Configuring-Network-Ports-for-R1Soft-Products.png!


h6. Scheme description

* Default Ports shown.
* Blue dashed lines are external apps/access.
* Orange solid lines are used in DCC to Backup Manager communication.
* Ports in DCC and Backup Manager boxes may be configured on a server by server basis.
* Ports in DCC/Backup Manager messages are for all servers.
* Initial DCC/Backup Manager registration is on the Backup Manager SOAP port.
* All updates, including initially showing the Backup Manager in the DCC Backup Manager list, are on the DCC/Backup Manager Messages ports.

----
h3. Database Ports

Customers with both Backup Manager _and_ Backup Agent can use {{localhost}} for their database instance hostname. It means, MySQL instance always should be localhost.

The Backup Manager will not connect directly to a database and instead *connect to MySQL through the Backup Agent connection*. {excerpt:hidden=true}Information about configuring network ports in a network or host-based firewall to use Server Backup Manager.{excerpt}