This topic provides reference for configuring network access permissions during OCP deployment.
Deployment units
| Deployment unit |
Description |
| OCP-Server |
Docker containing the OCP management service program |
| OCP-Console |
OCP web management console |
| OCP-Agent |
Agents deployed on the hosts that are managed by OCP, namely OCP-Agent and OB-Agent |
| OBServer |
OceanBase program deployed in OCP |
| OBProxy |
OBProxy program deployed in OCP |
| Backup-Agent |
Backup and recovery agent deployed in OCP |
| Application |
Application that accesses the database |
Listening port list
| Deployment item |
Listening port |
Protocol |
Modification |
Accessible to the following deployment units |
Remarks |
| OCP-Server |
8080 |
HTTP |
By setting the server.port OCP system parameter and restart OCP. |
OBServer OBProxy OCP-Console Backup-Agent |
The web service of the OCP-Server listens to the port. In general, other components access OCP-Server through SLB or DNS address. |
| OBServer |
2881 |
TCP |
Not supported |
OBProxy OCP-Server Application |
1. OBServer SQL listening port. 2. We recommend that you do not use direct connection to access OBServer. |
| OBServer |
2882 |
TCP |
Not supported |
OBServer |
RPC communication port between OBServers. |
| OBProxy |
2883 |
TCP |
Not supported |
Application OCP-Server Backup-Agent |
1. OBProxy listening port. 2. Applications access OBServer through OBProxy in general. |
| OBProxy |
2884 |
HTTP |
Not supported |
OCP-Server |
Listening port of the monitoring metrics API of OBProxy. |
| OCP-Agent |
62888 |
http |
Not supported |
OCP-Server |
Listening port of the API of OCP-Agent. |
| OCP-Agent |
62889 |
http |
Not supported |
OCP-Server |
Listening port of the monitoring data of OCP-Agent. |
| Backup-Agent |
2911 |
TCP |
You can change the port on the backup and recovery management page on OCP-Console. |
None |
Local listening port of Backup-Agent for performing backup. The port is not open to external access. If the port is used by another program, the Backup-Agent program will fail to start. |
| Backup-Agent |
2912 |
TCP |
You can change the port on the backup and recovery management page on OCP-Console. |
None |
Local listening port of Backup-Agent for performing recovery. The port is not open to external access. If the port is used by another program, the Backup-Agent program will fail to start. |
