# Port List > Default ports used by Pigsty components, with related parameters and status. --- LLMS index: [llms.txt](/llms.txt) --- This page lists the default ports for Pigsty module components. Adjust them as needed. Use this list to configure specific firewall rules. | Module | Component | Port | Parameter | Status | |:------------------------------:|:----------------------------------:|:-------:|:-----------------------------------------------------------------------------|----------| | [**`NODE`**](/docs/node) | **`node_exporter`** | `9100` | [**`node_exporter_port`**](/docs/node/param#node_exporter_port) | Enabled | | [**`NODE`**](/docs/node) | **`haproxy`** | `9101` | [**`haproxy_exporter_port`**](/docs/node/param#haproxy_exporter_port) | Enabled | | [**`NODE`**](/docs/node) | **`vector`** | `9598` | [**`vector_port`**](/docs/node/param#vector_port) | Enabled | | [**`NODE`**](/docs/node) | **`keepalived_exporter`** | `9650` | [**`vip_exporter_port`**](/docs/node/param#vip_exporter_port) | Optional | | [**`NODE`**](/docs/node) | **`chronyd`** | `123` | - | Enabled | | [**`DOCKER`**](/docs/docker) | **`docker`** | `9323` | [**`docker_exporter_port`**](/docs/docker/param#docker_exporter_port) | Optional | | [**`INFRA`**](/docs/infra) | **`nginx`** | `80` | [**`nginx_port`**](/docs/infra/param#nginx_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`nginx`** | `443` | [**`nginx_ssl_port`**](/docs/infra/param#nginx_ssl_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`nginx_exporter`** | `9113` | [**`nginx_exporter_port`**](/docs/infra/param#nginx_exporter_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`grafana`** | `3000` | [**`grafana_port`**](/docs/infra/param#grafana_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`victoriaMetrics`** | `8428` | [**`vmetrics_port`**](/docs/infra/param#vmetrics_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`victoriaLogs`** | `9428` | [**`vlogs_port`**](/docs/infra/param#vlogs_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`victoriaTraces`** | `10428` | [**`vtraces_port`**](/docs/infra/param#vtraces_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`vmalert`** | `8880` | [**`vmalert_port`**](/docs/infra/param#vmalert_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`alertmanager`** | `9059` | [**`alertmanager_port`**](/docs/infra/param#alertmanager_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`blackbox_exporter`** | `9115` | [**`blackbox_port`**](/docs/infra/param#blackbox_port) | Enabled | | [**`INFRA`**](/docs/infra) | **`dnsmasq`** | `53` | [**`dns_port`**](/docs/infra/param#dns_port) | Enabled | | [**`ETCD`**](/docs/etcd) | **`etcd`** | `2379` | [**`etcd_port`**](/docs/etcd/param#etcd_port) | Enabled | | [**`ETCD`**](/docs/etcd) | **`etcd`** | `2380` | [**`etcd_peer_port`**](/docs/etcd/param#etcd_peer_port) | Enabled | | [**`MINIO`**](/docs/minio) | **Silo S3 API** | `9000` | [**`minio_port`**](/docs/minio/param#minio_port) | Optional | | [**`MINIO`**](/docs/minio) | **Silo admin port** | `9001` | [**`minio_admin_port`**](/docs/minio/param#minio_admin_port) | Optional | | [**`REDIS`**](/docs/redis) | **Redis / Valkey** | `6379` | [**`redis_instances`**](/docs/redis/param#redis_instances) | Optional | | [**`REDIS`**](/docs/redis) | **`redis_exporter`** | `9121` | [**`redis_exporter_port`**](/docs/redis/param#redis_exporter_port) | Optional | | [**`VIBE`**](/docs/vibe) | **`code-server`** | `8443` | [**`code_port`**](/docs/vibe/param#code_port) | Optional | | [**`VIBE`**](/docs/vibe) | **`jupyterlab`** | `8888` | [**`jupyter_port`**](/docs/vibe/param#jupyter_port) | Optional | | [**`KAFKA`**](/docs/kafka) | **`broker`** | `9092` | [**`kafka_port`**](/docs/kafka/param#kafka_port) | 🧪 BETA | | [**`KAFKA`**](/docs/kafka) | **`KRaft controller`** | `9093` | [**`kafka_controller_port`**](/docs/kafka/param#kafka_controller_port) | 🧪 BETA | | [**`KAFKA`**](/docs/kafka) | **`kafka_exporter`** | `9308` | [**`kafka_exporter_port`**](/docs/kafka/param#kafka_exporter_port) | 🧪 BETA | | [**`KAFKA`**](/docs/kafka) | **`JMX exporter`** | `9404` | [**`kafka_jmx_exporter_port`**](/docs/kafka/param#kafka_jmx_exporter_port) | 🧪 BETA | | [**`MYSQL`**](/docs/mysql/) | **`mysqld`** | `3306` | Fixed value (the current pilot exposes no port parameter) | 🧪 PILOT | | [**`MYSQL`**](/docs/mysql/) | **`MySQL X Protocol`** | `33060` | Fixed value; loopback-only on a single node, member-facing in a 3-node topology | 🧪 PILOT | | [**`MYSQL`**](/docs/mysql/) | **`Group Replication`** | `33061` | Fixed value; three-node InnoDB Cluster only | 🧪 PILOT | | [**`MYSQL`**](/docs/mysql/) | **`MySQL Router RW`** | `6446` | Fixed value; three-node InnoDB Cluster only | 🧪 PILOT | | [**`MYSQL`**](/docs/mysql/) | **`MySQL Router RO`** | `6447` | Fixed value; three-node InnoDB Cluster only | 🧪 PILOT | | [**`MYSQL`**](/docs/mysql/) | **`mysqld_exporter`** | `9104` | Fixed value; controlled by `mysql_exporter_enabled` | 🧪 PILOT | | [**`PGSQL`**](/docs/pgsql) | **`postgres`** | `5432` | [**`pg_port`**](/docs/pgsql/param#pg_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`pgbouncer`** | `6432` | [**`pgbouncer_port`**](/docs/pgsql/param#pgbouncer_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`patroni`** | `8008` | [**`patroni_port`**](/docs/pgsql/param#patroni_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`pg_exporter`** | `9630` | [**`pg_exporter_port`**](/docs/pgsql/param#pg_exporter_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`pgbouncer_exporter`** | `9631` | [**`pgbouncer_exporter_port`**](/docs/pgsql/param#pgbouncer_exporter_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`pgbackrest_exporter`** | `9854` | [**`pgbackrest_exporter_port`**](/docs/pgsql/param#pgbackrest_exporter_port) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`{{ pg_cluster }}-primary`** | `5433` | [**`pg_default_services`**](/docs/pgsql/param#pg_default_services) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`{{ pg_cluster }}-replica`** | `5434` | [**`pg_default_services`**](/docs/pgsql/param#pg_default_services) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`{{ pg_cluster }}-default`** | `5436` | [**`pg_default_services`**](/docs/pgsql/param#pg_default_services) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`{{ pg_cluster }}-offline`** | `5438` | [**`pg_default_services`**](/docs/pgsql/param#pg_default_services) | Enabled | | [**`PGSQL`**](/docs/pgsql) | **`{{ pg_cluster }}-`** | `543x` | [**`pg_services`**](/docs/pgsql/param#pg_services) | Optional | {.full-width} The native MySQL pilot reuses port `3306` for MySQL Shell AdminAPI. A local systemd timer runs XtraBackup, which has no listening port. The role explicitly disables the MySQL Router REST management interface. The table lists only network endpoints currently managed by the role. ## Public Port Recommendations If you use firewall [**`zone`**](/docs/node/param#node_firewall_mode) mode, expose only minimum required ports via [**`node_firewall_public_port`**](/docs/node/param#node_firewall_public_port): - Minimal management surface: `22, 80, 443` (recommended) - If public direct DB access is required: additionally expose `5432` Avoid direct public exposure of internal component ports. Examples include: - `etcd`: `2379/2380`. - `patroni`: `8008`. - Exporters: `9xxx`. - Object-storage S3/admin endpoints: `9000/9001`. - `redis`: `6379`. - `ferretdb`: `27017/27018`. - Kafka: `9092/9093`. - MySQL Group Replication: `33061`. ```yaml node_firewall_mode: zone node_firewall_public_port: [22, 80, 443] # node_firewall_public_port: [22, 80, 443, 5432] # only if public DB access is required ```