Ports and Services

Web Server Ports

According to your choice of operating system and installation method, your web server on which Zend Server is installed, will be listening on a different port.

  • Linux using DEB or RPM packages:
    Zend Server will be installed on the distribution supplied web server which listens to port 80 by default. This can be set to another port by editing your Apache/nginx configuration.
  • Mac OS X:
    Zend Server will be installed on the bundled Apache web server which listens on port 10088 by default. This can be set to another port by editing your Apache configuration file at     /usr/local/zend/apache2/conf/httpd.conf and changing the value of the directive Listen.
  • Windows on IIS:
    Zend Server will be installed on the built-in IIS web server which listens to port 80 by default. This can be set to another port from the IIS configuration Manager.
  • Windows on Apache:
    Zend Server will be installed on the bundled Apache web server which listens on port 80 by default. unless a different port was selected during installation. This can be set to another port from your Apache configuration file at <install_dir>\Apache2\conf\httpd.conf and changing the value of the directive Listen.

Firewall Settings

The following document describes the minimal set of ports that must be opened in your firewall in order for the different Zend Server components to function.

If you are not using one of the Zend Server components listed below, you are not required to open any of its related ports.

Note:

Most ports can be configured. Each component’s relevant documentation includes configuration details.

Zend Server User Interface (Web GUI)

Function

Port / Protocol

Comments

Web GUI Access

TCP/10081 (HTTP) from client browser to Zend Server

Should be open for administrative access, and between Zend Server cluster members. May be blocked if HTTPS (10082) is always used.

Web GUI Access

TCP/10082 (HTTPS) from client browser to Zend Server and between Zend Server cluster members

Linux and Windows (Apache) only. Should be open for administrative access, and between Zend Server cluster members.  May be blocked if HTTPS is never used.

Local Web Server Control for Zend Server GUI

TCP/10083 (HTTP) on localhost on Zend Server

Must be open for localhost access only

Updates periodical check for the GUI

TCP/80 (HTTP) from Zend Server to updates.zend.com

If closed, no updates will be listed in the Administration tab. This does not affect the Linux package managers’ ability to fetch updates.

Update Notification Email Subscription

TCP/80 (HTTP) from Zend Server to now.eloqua.com

Optional, one time only. Not required for normal operation.

Monitoring and Code Tracing

Function

Port / Protocol

Comments

Event Reporting - Clustered environment

TCP/3306 (MySQL) from cluster members to DB Server

DB Server may be on any machine running Zend Server, or may be on a dedicated machine, depending on your configuration. Only required when running in Cluster.

Event Viewing – Clustered environment

TCP/3306 (MySQL) from Zend Server cluster members to DB Server

DB Server may be on any machine running Zend Server, or may be on a dedicated machine, depending on your configuration. Only required when running in Cluster.

Debugging and Profiling

Function

Port / Protocol

Comments

Debugging / Profiling in open LAN

TCP/10137 (Proprietary Debugger Protocol) from Zend Server (the debugging server) to Zend Studio (client machine)

Zend Studio must be able to accept incoming connections from server. Will work when server and client are in the same LAN. If machines are separated by NAT routers or Firewalls, usage of tunneling or SSH port forwarding is required.

Tunneling

TCP/80 (HTTP, persistent connection) from Zend Studio to Zend Server.

Linux / Mac only. Required to bypass NAT routers or Firewalls between Zend Studio and Zend Server. Connection starts as HTTP but is kept alive after HTTP request ends, and will be used to tunnel debugging traffic.

Event Debugging and Profiling

HTTP/S on application port (usually TCP/80) from Zend Server to application server or alternate debugging server

The Zend Server GUI will attempt to reproduce the original triggering HTTP request when debugging an event. For this reason, in order to debug or profile an event, the GUI must be able to send HTTP/S requests to the same host name / port on which the application runs, or to an alternate debugging server if one is configured.

Studio Settings Auto-Detection

TCP/20080 (HTTP) on localhost on the client’s machine

No interaction with the server is required - sent using AJAX to http://localhost:20080 by the user’s browser, in order to check Zend Studio configuration before debugging events. Not used if Studio Settings auto-detection is turned off.

Zend Java Bridge

Function

Port / Protocol

Comments

Java Bridge

TCP/10001 from the Java Bridge extension to the Java Bridge server

  

Job Queue

Function

Port / Protocol

Comments

Job Queuing

TCP/10085 (Proprietary JQ protocol) from Zend Server to Job Queue Daemon on local windows machine only

On Linux, Zend Server is configured by default to use UNIX Domain Sockets instead of TCP. Opening port is only required in cluster or when queuing to a remote machine.

Job Execution

TCP/80 (HTTP) or any other port, depending on Job URL, from Job Queue Daemon to executing server

Application Dependant: target host and port depend on Job URL, which may change per job.

Session Clustering

Function

Port / Protocol

Comments

Session Data Exchange – PHP to Session Clustering Daemon

TCP/10062 on localhost on each Zend Server instance

Windows only.

In Linux, UNIX Domain Sockets are used by default.

Session Data Exchange – Cluster Members

TCP/10060 between Zend Server instances

 May be initiated between any pair of Session Clustering Daemons. Kept open until connection times out.

Graceful Shutdown

TCP/10063 between Zend Server instances

Initiated during graceful shutdown / startup between the terminated server and replacement servers.

Session Clustering Discovery and Status Checks

UDP/10070 between Zend Server instances

UDP Broadcast or Unicast (depending on configuration) between all cluster members.

 

Email

Function

Port / Protocol

Comments

Email notifications from the Audit Trail, Notification Center and Zend Monitor

TCP/ port (SMTP) depends on configured mail service:

  • Gmail - 587
  • Yahoo - 465
  • Exchange - 587

From Zend Server to configured mail server

Optional, depends on mail settings and feature-specific configurations.