# Proxy and firewall allowlist information The following tables list the most important TCP/IP ports the Talend products use. You need to make sure that your firewall configuration is compatible with these ports or change the default ports where needed. Add the following websites to the allowlist on every machine that runs a Talend module: | URL | Port | Usage | | --- | --- | --- | | update.talend.com | 443 | For downloading additional packages such as Bonita BPM Integration, Talend Metadata Bridge and upgrades from Talend Studio tools | | talend-update.talend.com | 443 | For downloading libraries in Talend Studio (mainly for components) | | www.talend.com | 443 | For testing and sending usage statistics from Talend Studio | | talendforge.org | 443 | For using Talend Exchange in Talend Studio and for users actions such as clicking on forum links | | community.talend.com | 443 | For user actions, such as clicking on links. | | help.talend.com | 443 | For user actions, such as clicking on help links. | | URL | Port | Usage | | --- | --- | --- | | https://repo1.maven.org | 8082 |

For the ESB Runtime Features Installer -
Talend Artifact Repository access | | URL | Port | Usage | | --- | --- | --- | | www.bonita.com | 80 |

Adding this website to the allowlist is optional.
It is only required when Bonita BPM is installed. | Information noteNote: If your deployment depends on other third-party software, you may need to add other URLs to your allowlist. Talend recommends adding to the allowlist all hostnames that have dynamic IP addresses. In this table: * **Port**: a TCP/IP port or a range of ports. * **Active**: Active for a standard installation of the product (Standard Installation is defined here as Server or Client installation using Talend Installer with the default values provided in the Installer User Interface). * **Direction**: In (Inbound) and Out (Outbound) refer to the direction of requests between a port and the service (or CFX route) communicating with it. For example, if a service is listening for HTTP requests on port 9080, then it is an inbound port because other services are performing requests on it. However, if the service calls another service on a given port, then it is an outbound port. * **Usage**: which part of the Product component uses this port (for example 1099 is used by the JMX Monitoring component of Talend Runtime). * **Configuration file**: the file or location where the value can be changed. * **Note**: anything which is important to mention additionally. ## Talend Studio ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8090

Active: N | IN | tESBProviderRequest (SOAP Data Server) and tRESTRequest (REST
Data Service default port) | REST: Preferences / Talend / ESB SOAP: tESBProviderRequest
component details | | 80

Active: N | OUT | Big Data dynamic distribution only - Apache repository port
(*repository.apache.org*) | / | | 18080

Active: Y | IN OUT |

Bonita Embedded Server - Tomcat HTTP port | <Workspace>/tomcat/conf/server.xml | | 18443

Active: Y | IN OUT |

Bonita Embedded Server - Tomcat HTTPS port | <Workspace>/tomcat/conf/server.xml | | 18005

Active: Y | IN OUT |

Bonita Embedded Server - Shutdown port | <Workspace>/tomcat/conf/server.xml | | 18009

Active: Y | IN OUT |

Bonita Embedded Server - Tomcat AJP Port | <Workspace>/tomcat/conf/server.xml | | 19091

Active: Y | IN OUT |

Bonita Embedded Server - H2 Embedded | <Workspace>/tomcat/conf/bitronix-resources.properties,
<Workspace>/tomcat/conf/Catalina/localhost/bonita.xml
and
<Workspace>/tomcat/conf/server.xml | ## Talend CommandLine Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8090

Active: N | IN | tESBProviderRequest (SOAP Data Server) and tRESTRequest (REST
Data Service default port) | REST: Preferences / Talend / ESB SOAP: tESBProviderRequest
component details | | 8002

Active: N | IN | Talend CommandLine
port | commandline-linux.sh | | 3334 to 4333

Active: Y | IN | Talend Studio
live statistics | The values can be configured in Talend Studio | | 4334 to 5333

Active: Y | IN | Talend Studio
trace mode | The values can be configured in Talend Studio | ## Talend Identity and Access Management Ports | Port | Direction | Usage | Configuration file | Note | | --- | --- | --- | --- | --- | | 9080

Active: Y | IN | Talend Identity and Access Management
Server - Apache Tomcat HTTP Port | /conf/server.xml | | | 9009

Active: Y | IN | Talend Identity and Access Management
Server - Apache Tomcat AJP Connector Port | /conf/server.xml | | | (none)

Active: Y\* | OUT | Talend Identity and Access Management
Server - Database | /conf/iam.properties | \* By default an embedded H2 Database is used (not network
accessible). If another database should be used the port is
related to the type and configuration of this database. | ## Talend Administration Center Ports | Port | Direction | Usage | Configuration file | Note | | --- | --- | --- | --- | --- | | 5601

Active: Y | OUT | Talend Administration Center
Kibana port | Configuration Page in Talend Administration Center
Web-UI | | | 8080

Active: Y | IN | Talend Administration Center
Server Apache Tomcat HTTP Port | /conf/server.xml | | | 8009

Active: Y | IN | Talend Administration Center
Server Apache Tomcat AJP Connector Port | /conf/server.xml | | | 9419

Active: Y | IN OUT | Talend Administration Center
Server - Drools Workbench Git Port
(-Dorg.uberfire.nio.git.daemon.port) | <ApacheTomcatPath>/bin/setenv.sh | | | 10000 - 11000

Active: N | IN | Talend Administration Center
Server External Talend JobServer | Add
scheduler.conf.statisticsRangePorts=10000-11000
to
/webapps/org.talend.administrator/WEB-INF/classes/configuration.properties | A free port is chosen in the allotted range on the Administrator
machine, where the Job will send the statistics information
during its execution. Default is 10000-11000 but it can be
configured to another port range.

The range of ports is only opened when real-time statistics
gathering is activated for a Job. | | (none)

Active: Y\* | OUT | Talend Administration Center
Server Database | Configuration Page in Talend Administration Center
Web-UI | \* By default an embedded H2 Database is used (not network
accessible). If another database should be used the port is
related to the type and configuration of this database. | ## Talend Data Preparation Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 5044

Active: Y | OUT | Talend Data Preparation audit server port | config/audit.properties | | 9999

Active: Y | IN | Talend Data Preparation User Interface port | config/application.properties | | 8989

Active: Y | OUT | Talend Data Preparation backend port | config/application.properties | | 27017

Active: Y | OUT | MongoDB port | <MongoDB>/mongod.cfg | ## Talend Data Stewardship Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 5044

Active: Y | OUT | Talend Data Stewardship audit server port | conf/audit.properties | | 19999

Active: Y | IN | Apache Tomcat HTTP Port | tomcat/conf/server.xml | | 19924

Active: Y | IN | Apache Tomcat Shutdown Port | tomcat/conf/server.xml | | 19928

Active: Y | IN | Apache Tomcat AJP Connector Port | tomcat/conf/server.xml | | 27017

Active: Y | OUT | MongoDB port | <MongoDB>/mongod.cfg | | 2181

Active: Y | OUT | Apache ZooKeeper port | <Kafka>/config/zookeeper.properties | | 9092

Active: Y | OUT | Apache Kafka port | <Kafka>/config/server.properties | ## Talend LogServer Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 5044

Active: Y | IN | Talend LogServer audit server port | logstash-talend.conf | | 5601

Active: Y | IN | Talend LogServer Kibana port | logstash-talend.conf | | 8050

Active: Y | IN | Talend logging module - Talend Administration Center log4j port | logstash-talend.conf | | 8052

Active: Y | IN | Talend logging module - Talend Components log4j port | logstash-talend.conf | | 8053 and 8054

Active: Y | IN | Talend logging module - MDM log4j ports | logstash-talend.conf | | 8055

Active: Y | IN | Talend logging module - Talend JobServer log4j port | logstash-talend.conf | | 8056 and 8057

Active: Y | IN | Talend logging module - Audit log4j ports | logstash-talend.conf | | 9200

Active: Y | IN | Talend logging module - Elasticsearch port | <TalendLogServerPath>/elasticsearch-X.X.X/config/elasticsearch.yml
and logstash-talend.conf | * Available in: * Data Fabric * Data Services Platform * ESB * MDM Platform * Real-Time Big Data Platform ## Talend Runtime Ports | Port | Direction | Usage | Configuration file (./etc) | | --- | --- | --- | --- | | 8000

Active: Y | IN | Talend JobServer - Command Port | org.talend.remote.jobserver.server.cfg | | 8001

Active: Y | IN | Talend JobServer JobServer - File Transfer Port | org.talend.remote.jobserver.server.cfg | | 8888

Active: Y | IN | Talend JobServer JobServer - Monitoring Port | org.talend.remote.jobserver.server.cfg | * Available in: * Data Fabric * Data Services Platform * ESB * MDM Platform * Real-Time Big Data Platform ## Talend ESB Ports | Port | Direction | Usage | Configuration file (./etc) | Note | | --- | --- | --- | --- | --- | | 8040

Active: Y | IN | Standard HTTP port | org.ops4j.pax.web.cfg | See the Talend ESB Container Administration Guide for config scripts and also
the admin: command which allows you to set ports to different
values. | | 9001

Active: Y | IN | Standard HTTPS port | org.ops4j.pax.web.cfg | | | 1099

Active: Y | IN | JMX - RMI Registry Port | org.apache.karaf.management.cfg | | | 44444

Active: Y | IN | JMX - RMI Registry Port | org.apache.karaf.management.cfg | | | 8101

Active: Y | IN | Apache Karaf - SSH Port | org.apache.karaf.shell.cfg | | | 61616

Active: N | IN | Messaging - ActiveMQ Broker Port | system.properties | | | 2181

Active: N | IN OUT | ESB Locator - Apache ZooKeeper Port | Server: org.talend.esb.locator.server.cfg

Client: org.talend.esb.locator.cfg | | | 1527

Active: N | IN | ESB SAM Database - Apache Derby Port | The port value of the embedded Derby database depends on the
Talend Runtime Container configuration, as the database is shipped with the
container. | The embedded Apache Derby DB is only supported for Development
and Testing purpose in production system environments. The
Container, which hosts the SAM Server, needs access to the
related Database port. The port depends on the Database and
Database configuration. | | 8082

Active: Y | OUT | ESB Runtime Features Installer - Talend Artifact Repository access | org.ops4j.pax.url.mvn.cfg | | | (\*)

Active: Y | IN OUT | Customer Services, Routes etc. | | Any of the Data Services, Routes, and other components
additionally deployed to the container might require additional
port to be accessible. | ## Talend JobServer Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8000

Active: Y | IN | Talend JobServer - Command Port | org.talend.remote.jobserver.server.cfg | | 8001

Active: Y | IN | Talend JobServer - File Transfer Port | org.talend.remote.jobserver.server.cfg | | 8555

Active: Y | IN | Talend JobServer - Process Messaging Port | <Talend JobServerPath>/conf/TalendJobServer.properties | | 8888

Active: Y | IN | Talend JobServer - Monitoring Port | org.talend.remote.jobserver.server.cfg | ## Talend Artifact Repository Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8081

Active: Y | IN | Talend Artifact Repository -
Jetty HTTP Port | /conf/jetty.xml | * Available in: * Big Data Platform * Data Fabric * Data Management Platform * Data Services Platform * MDM Platform * Real-Time Big Data Platform Availability-note[Deprecated](https://help.talend.com/r/en-US/Cloud/labels-on-talend-help-center/availability-deprecated) This content is deprecated. ## Talend DQ Portal Ports Talend DQ Portal is deprecated from Talend 7.1 onwards. | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8580

Active: Y | IN | Standard port | /tdqp/apache-tomcat/conf/server.xml | | 7890

Active: Y | IN | Port of the Talend DQ Portal
configuration embedded database | /tdqp/apache-tomcat/conf/server.xml
and
/tdqp/apache-tomcat/database/startup.sh | * Available in: * Data Fabric * MDM Platform ## Talend MDM Web UI Ports | Port | Direction | Usage | Configuration file (./etc) | Note | | --- | --- | --- | --- | --- | | 5044

Active: Y | OUT | Talend MDM Server
audit server port | conf/audit.properties | | | 8180

Active: Y | IN OUT | Talend MDM Server -
Tomcat HTTP port | <TomcatPath>/conf/server.xml | \*If this port is in conflict with another application port, you
have the possibility to choose between the following ports:
8080, 8280, and 8380. | | 8543

Active: Y | IN OUT | Talend MDM Server -
Tomcat HTTPS port | <TomcatPath>/conf/server.xml | | | 8105

Active: Y | IN OUT | Talend MDM Server -
Shutdown Port | <TomcatPath>/conf/server.xml | | | 8109

Active: Y | IN OUT | Talend MDM Server -
Tomcat AJP Port | <TomcatPath>/conf/server.xml | | * Available in: * Big Data Platform * Data Fabric * Data Management Platform * Data Services Platform * MDM Platform * Real-Time Big Data Platform ## Talend Dictionary Service Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 8187

Active: Y | IN | Standard port | /conf/server.xml | | 27017

Active: Y | OUT | MongoDB port | <MongoDB>/mongod.cfg | | 2181

Active: Y | OUT | Apache ZooKeeper port | <Kafka>/config/zookeeper.properties | | 9092

Active: Y | OUT | Apache Kafka port | <Kafka>/config/server.properties | ## Streams Runner and Spark Job Server Ports | Port | Direction | Usage | Configuration file | | --- | --- | --- | --- | | 9060

Active: Y | IN | Streams Runner default port | <Flow\_Runner\_Path>/conf/application.conf | | 8098

Active: Y | IN | Spark Job Server default port | <Spark\_Job\_Server\_Path>/settings.sh | | 8099

Active: Y | IN | Spark Job Server H2 port | <Spark\_Job\_Server\_Path>/settings.sh | | 9998

Active: Y | IN | Spark Job Server JMX port | <Spark\_Job\_Server\_Path>/settings.sh |