2379

etcd Client

Critical Risk

TCP — Database

Port Overview

Port Number 2379
Service Name etcd Client
Transport Protocol TCP
Category Database
Security Risk Critical
Port Range Registered (1024-49151)

What is Port 2379?

Port 2379 is the client communication port for etcd, the distributed key-value store used by Kubernetes for cluster state storage. Kubernetes API servers and clients use this port to read and write cluster configuration and state data. Exposed etcd instances can allow complete Kubernetes cluster compromise.

TCP Database Commonly Used

Security Considerations

Port 2379 (etcd Client) is classified as critical risk. This port should not be exposed to the public internet. The service transmits data without encryption, making it vulnerable to eavesdropping, credential theft, and man-in-the-middle attacks.

Recommendation: Block this port at the firewall. Use encrypted alternatives (SSH, SFTP, HTTPS) instead.

Related Ports — Database