Basic Planning Considerations

Deploying ContentDirector with firewalls

Default ports to open in all firewalls

The default port for the ContentDirector application is 8080, and for NetCache administration, 3132. For firewalls between the core application and group leaders, these ports must be open:

Firewall in front of the core application:
- 8080/tcp inbound
- 3132/tcp outbound
Firewall in front of the group leader:
- 3132/tcp inbound
- 8080/tcp outbound

If you change either of these ports, the new port must be opened in both firewalls.

Configuring ports in NAT-based firewalls

For NAT-based firewalls between the core application and group leaders, you must configure the firewalls to direct inbound port trafficto the corresponding node. Below are examples with randomly chosen IP addresses:

Firewall in front of the core application directs inbound port 8080/tcp traffic to the IP address of core application, for example:
8080 -> 10.95.100.50
Firewall in front of the group leader directs inbound port 3132/tcp traffic to the IP address of the group leader, for example:
3132 -> 10.95.200.30

Ports to open in NAT-based firewalls on satellite networks

If the group leader is behind a NAT-based firewall and delivers data directly to a satellite without going through the firewall, open inbound port 1100/udp for MCTP backchannel traffic.

If group members on the same network are behind NAT-based firewalls and receive data directly from the satellite without going through the firewall, open outbound port 1100/udp for MCTP backchannel traffic.

Multiple group leaders behind a single NAT-based firewall

For a NAT-based firewall with multiple external addresses, you can set up one group leader behind the firewall for each external address. If you have more group leaders than external addresses in the firewall, you must reconfigure the administrative port on every group leader that does not have its own unique external firewall address.

You also must open the corresponding firewall ports:

In the firewall in front of the group leaders, open new inbound ports and redirect traffic on them to the corresponding group leaders
In the firewall in front of the core application, open corresponding new outbound ports