Is port 2379 (etcd Client) dangerous?

Port 2379 is classified as critical risk and should not be exposed to the public internet. It transmits data without encryption, making it vulnerable to eavesdropping and credential theft.

Should port 2379 be open on my firewall?

No, port 2379 should not be open to the public internet. Block it at the firewall and use encrypted alternatives such as SSH, SFTP, or HTTPS instead.

What transport protocol does port 2379 use?

Port 2379 (etcd Client) uses the TCP transport protocol and falls under the Database category.

:2379 (TCP)

etcd Client

Critical Risk

TCP — Database

Port Overview

Port Number 2379

Service Name etcd Client

Transport Protocol TCP

Category Database

Security Risk Critical

Port Range Registered (1024-49151)

What is Port 2379?

Port 2379 is the client communication port for etcd, the distributed key-value store used by Kubernetes for cluster state storage. Kubernetes API servers and clients use this port to read and write cluster configuration and state data. Exposed etcd instances can allow complete Kubernetes cluster compromise.

TCP Database Commonly Used

Security Considerations

Port 2379 (etcd Client) is classified as critical risk. This port should not be exposed to the public internet. The service transmits data without encryption, making it vulnerable to eavesdropping, credential theft, and man-in-the-middle attacks.

Recommendation: Block this port at the firewall. Use encrypted alternatives (SSH, SFTP, HTTPS) instead.

Related Ports — Database

66 Oracle SQL*NET 118 SQL Services 134 INGRES-NET 142 BL-IDM 150 SQL-NET 156 SQL Service 181 Unify 188 MUMPS

Related Terms

ASN BGP Hijack Data Center Domain Name Dual Stack Internet Exchange Point (IXP)