Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.


Please fill in the protocol (http/https/ws... to determine if it will cross the ingress port) and the reason for the port being open (hybrid deployment needs access?, external access client (kibana/gui...)) in the table below in prep of removing some nodeports in the run up to using an Ingress controller

Sync with Casablanca Unprotected Interfaces

TODO: add protocol to each port - to determine suitability for HTTP/HTTPS or multi-protocol proxy for ingress

NodePorts are used to allow client applications, that run outside of Kubernetes, access to ONAP components deployed by OOM.

A NodePort maps an externally reachable port to an internal port of an ONAP microservice.

It should be noted that the use of NodePorts is temporary. An alternative solution is currently being scoped for the Dublin Release.

But for now, this page is used to track NodePort assignments.


All ONAP project teams that have microservices that need to provide external access for clients, must update this wiki page to reserve NodePorts and prevent ONAP deployment failures due to NodePort conflicts.

If a service is only accessed by other services within the same kubernetes deployment (ie. databases, backend services with no external northbound APIs) then please DO NOT reserve

a NodePort as they are a very limited resource. The service name and its Internal Port (<service name>.port) should be used instead (ie. vid.8443)


To reserve a NodePort search the table below for the text "FREE_PORT".

If it is determined that an existing reservation is no longer required, please add the text "FREE_PORT" to indicate its availability.


Developer Checklist

Verify unused nodeports

Before using a particular nodeport - verify there is no conflict by deploying the entire system and checking services or the tables below.

Get the nodeport of a particular service

Code Block
themeMidnight
# human readable list
kubectl get services --all-namespaces | grep robot
# machine readable number
kubectl get --namespace onap -o jsonpath="{.spec.ports[0].nodePort}" services robot)


Node Port Reservations 302 prefix

Component

(sortable)

PodService name

Protocol

http/https/ws...

Node PortInternal PortReason for exposure outside of the internal DNS service name access
vid
vid
302008443
FREE_PORT


302018843
sdnc / ccsdk
ccsdk/oran/a1-policy-management-servicehttp
https
30093
30094
9080
9081
Used ito access A1 Policy Managment service API - used in different ONAP & OSC deployments - including external rApp/client/portal access
See ONAP/3GPP & ORAN Alignment: A1 Adapter extensions (Guilin)
sdnc
sdnc
302028282http port, removed in El Alto.  Instead, users should use https node port 30267
sdnc
sdnc-dgbuilder
302033000
sdc
sdc-be
302048443
sdc
sdc-be
302058080
sdc
sdc-fe
302068181
sdc
sdc-fe
302079443
appc
appc
302088282removed in Frankfurt
robot
robot
3020988u:p test:test
aai
aai-modelloader
302108080
appc
appc
302119090
portal
portal-sdk
302128443
portal
portal-app
302258443
policy
policy brmsgw
302169989


policy
drools (dup?)
302176969
policy
pap
302189091
policy
pap
302198443
aai
aai-sparky-be
302209517
policy
drools (dup?)
302219696
dcaeDCAEGEN2

hv-ves

xdcae-hv-ves-collector


302226061
dcae

DCAEGEN2


30223

Reserved for future DCAEapp

(12/30 - dcae-datafile-collector usage on this port is removed since El-Alto)

so
so-monitor
302249091


portal

portal-app (ssl)


302258443

https://gerrit.onap.org/r/#/c/69859/

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyOOM-1455

dmaap
message-router
302263905
dmaap
message-router
302273904
appc
appc-dgbuilder
302283000CAUTION2: There might me blanks in following data.
aai
aai-modelloader
302298443CAUTION2: There might me blanks in following data.
appc
appc
302308443
appc
appc
302311830
aai
aai
302328080
aai
aai
302338443
pomba
pomba-kibanahttps302345601
dcae
xdcae-ves-collector
302358080
policy
nexus
302368081
policy
policy-apex-pdp
3023712345
aai
aai-graphgraph
302388453

Jira
serverONAP JIRA
columnskey,summary,type,created,updated,due,assignee,reporter,priority,status,resolution
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyAAI-2596

aai
aai-spike
302399518
pomba
pomba-context-builder
302409530
dmaap
dmaap-bc
302418080
dmaap
dmaap-bc
302428443
aaf
aaf-sms
3024310443
aaf
aaf-sms-db
302448200CAUTION2: There might me blanks in following data.
sdnc
sdnc
302468280Appears to be no longer needed - investigating
dcae

dcae datafile collector


302458100
aaf
aaf-service
302478100
oof
oof-osdf
302488698
pomba
pomba-data-router
302499502
appc
appc-cds
3025080
aaf
aaf-gui
302518200
so
so-mariadb
302523306
log
log-kibanahttp302535601external access from client application
log
log-eshttp302549200external ELK stack for hybrid deployment
log
log-lshttp302555044external ELK stack for hybrid deployment
sdc
sdc-wfd-fe
302568080
sdc
sdc-wfd-be
302578080
policy
clamp
302582443
dmaap
dmaap-dr-provhttp302598080external access for multi-site/cluster comms
cli
cli
302608080
multicloud
multicloud-azure
302619008https://gerrit.onap.org/r/#/c/68647/
dcae

dcae datafile collector


30262                 8433
sdc
sdc-dcae-fe
302638183
sdc
sdc-dcae-fe
302649444
sdc
sdc-dcae-dt
302658186
sdc
sdc-dcae-dt
302669446
sdnc
sdnc
302678443https port, used for access to OpenDaylight REST interface 
aai
aai-crud-service (gizmo)
302689520
dmaap
dmaap-dr-provhttps302698443external access for multi-site/cluster comms
consul
consul-server-ui
302708500
cli
cli
302719090
sdnc
SDNC GEO (mysql)
30272

sdnc
SDNC GEO (mysql)
30273

nbi
nbi
302748443


oof
oof-has-api
302758091
oof
oof-has-music
302768080
so
so
302778080see also https://gerrit.onap.org/r/#/c/72433/2
aai
aai-champ
302789522
aai
aai-babel
302799516
msb
msb-iag
3028080
msb
msb-discovery
3028110081
msb
msb-eag
3028280
msb
msb-iag
30283443
msb
msb-eag
30284443
msb
msb-consul
302858500
dcae
dcae-redis
302866379
dcae
dcae-redis
3028716379
sniro
sniro-emulator
3028880

pnda has a conflict here -

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyDCAEGEN2-1012

appc
appc-cdt
3028918080
clamp
cdash-kibana
302905601
multicloud
multicloud
302919001No more such nodePort for multicloud
holmes

holmes-rule-mgmt


30292

holmes

holmes-rule-mgmt


30293

multicloud
multicloud-windriver
302949005No more such nodePort for multicloud
clamp
clamp
302958080
multicloud

multicloud-pike


302969007

No more such nodePort for multicloud

vnfsdk
refrepo
302978702
log
LOG demo target
302988080

taken from UUI - they are using the 303 prefix

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyOOM-1531

pomba
pomba-networkdiscoveryREST302998080

taken from UUI - they are using the 303 prefix

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keySDNC-533

https://gerrit.onap.org/r/#/c/73980/2

vvp
vvp
??

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyOOM-1534

uui
uui
303988080may be a typo with 30298 - currently using 398 as of 20181125
uui
uui-server
303998082
Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyOOM-1531

may be a typo with 30298 - currently using 399 as of 20181125



There
is

Room above:

There is ROOM Above 31100







modeling
modeling-etsicatalog
303018806
music
music-api
303048443music-api


IF POSSIBLE
Leave31104-31109

open

aaf
aaf-servicehttps/REST(json|xml)311108100

AAF Main Service

aaf
aaf-locatorhttps/REST(json|xml)311118095AAF Locator
aaf
aaf-oauthhttps/REST(json|xml)311128140AAF OAuth2 access
aaf
aaf-guihttps/REST(json|xml)311138200AAF GUI
aaf
aaf-cmhttps/REST(json|xml)311148150AAF Certificate Manager
aaf
aaf-fs

http (Note: Fileserver

for CRLs, etc)

311158096AAF File Server
aaf
aafHOLD for Future

31116

31117

31118


Future AAF Services
aaf
aaf-hellohttps/REST(json|xml)311198130AAF Hello Sample
appc
appcHOLD for Future

31200

31201

31202

31203



oof
optf-model-apihttps/REST(json)312048698optf model, execution engine.
cps
cpshttps/REST(json)312058080CPS RESTService | Only from Honolulu Release
cps-xNf
cps-xNfhttps/REST(json)312068080CPS xNF RESTService | Only from Honolulu Release

Node Port Reservations (304 node port prefix range)

This table is for documenting node ports that are reserved outside of a typical ONAP deployment.

Even though the ports listed below may appear in ONAP Helm Charts, they are not used at runtime unless enabled through configuration.

For example, there may be a need to reserve node ports (even temporarily) for use in POC or for demo code, that currently exists in the ONAP codebase.

Component

(sortable)

PODService name

Protocol

(rest/multi-protocol)

Node PortInternal Port

dcae

dcae-pnda-mirror

(node the boostrap pod np

is named mirror)


3040080

A PNDA deployment (outside the Kubernetes
cluster) needs to download its components from
the PNDA mirror (inside the Kubernetes cluster)

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyDCAEGEN2-1012


vfc
vfc-nslcm
304038403vfc-nslcm-port
vfc
vfc-vnflcm
304118801vfc-vnflcm-port
vfc
vfc-generic-vnfm-driver
304808484vfc-generic-vnfm-driver
vfc
vfc-redis
304818804vfc-redis-http-port1
vfc
vfc-redis
304826379vfc-redis-http-port2
vfc
vfc-db
304833306vfc-db-port
so
so-bpmn-infra
304048081so-bpmn-port
so
so-bpmn-infra
304055005so-bpmn-debug
so
so-vnfm-adapter
304069092

dcaeDCAEGEN2

xdcae-tca-analytics


3041011011

switch from 32010

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyDCAEGEN2-998



dcae
DCAEGEN2
304138100DCAE BBE-ep
dcae
DCAEGEN2
3041410443DCAE Config Binding Service (https)
dcae
 DCAEGEN2
30415 10000DCAE Config Binding Service (http)
dcae
 DCAEGEN2
30416 8080/8687DCAE RESTConf collector Service
dcae
 DCAEGEN2
30417 8443DCAE VESCollector - Https
dcae
 DCAEGEN2
30418 8080DCAE Dashboard (http)
dcae
 DCAEGEN2
30419  8443DCAE Dashboard (https)
?
Netbox UI
304208080

sdc
sdc-wfd-fe
304318443https://gerrit.onap.org/r/#/c/87116/
policy
policy-api
304406969https://gerrit.onap.org/r/#/c/79318/
policy
policy-xacml-pdp
304416969https://gerrit.onap.org/r/#/c/81977/
policy
policy-pap
304426969

log
log-demonode0
304538080

log
log-demonode1

304548080

log
log-demonode2

304558080

log
log-es SSL
30456

20181016

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyLOG-748



log
log-kb SSL
30457

20181016

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyLOG-748



log
log-ls SSL
30458

20181016

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyLOG-748



sdnc
SDNC GEO
30461


sdnc
SDNC GEO
30462


sdnc
SDNC GEO
30463


sdnc
SDNC GEO
30464


sdnc
SDNC GEO
30465


sdnc
SDNC GEO
30466


dcae
DCAEGEN2 
30470 162 Snmptrap (test purpose)
dcae
DCAEGEN2
30471
 Reserved
dcae
DCAEGEN2 
30472
 Reserved
dcae
DCAEGEN2 
30473 8080 DCAE MOD UI (HTTP) for Frankfurt release
dcae
DCAEGEN2
30474 8443 Reserved for DCAE MOD UI (HTTPs) post Frankfurt release
dcae
MUSIC
30475


dcae
MUSIC
304768080

dcae
MUSIC
30477


dcae
Datalake-admin-ui
3047980Datalake configuration protal.
dcae
Datalake-feeder
304081680Datalake control and exposure APIs.
multicloud
multicloud-starlingx
304859009

multicloud
multicloud-thinkcloud
304869010

multicloud

multicloud-fcaps


304879011

multicloud

multicloud-artifactbroker


304889014

multicloud
multicloud-tentative
30489


multicloud
multicloud-k8s
304989015

dmaap
DMaap tentative
30490
https://lists.onap.org/g/onap-discuss/topic/new_nodeports_for_the_dmaap/29582628?p=,,,20,0,0,0::recentpostdate%2Fsticky,,,20,2,0,29582628
dmaap
DMaap tentative
30491


dmaap
DMaap tentative
30492


dmaap
dmaap-dr-nodehttp304938080external access for multi-site/cluster comms
dmaap
dmaap-dr-nodehttps304948443external access for multi-site/cluster comms
multicloud
multicloud-service-assurance
304959009Only from Dublin Release
multicloud
multicloud-service-assurance (tentative)
304969010Only from Dublin Release
cds
cds-ui
304973000Dublin onwards.
cds
blueprint-processor
304998080Dublin onwards.
awx
awx-web
3047880Dublin onwards.


This port does not seem to be configurable from a Helm Chart.

Mike Elliott will raise issue to see if it can be made configurable within either the 302 or 304 ranges.

Service nameNode PortInternal Port
xdcae-tca-analytics

32010

use 30410

11011

Jira
serverONAP JIRA
serverId425b2b0a-557c-3c0c-b515-579789cceedb
keyDCAEGEN2-998

Table of Contents

Overview:

20180719: 2 ports left in 302 = 

30259
30269

The purpose of this document is to keep track of which node ports are currently being used by various containers with the intent to make node port allocation of new services easier until we move to dynamic ports for most of the components

These are a list of externally exposed ports in OOM - there are also extensive lists of all internal ports below.

ONAP Services List

http://onap.readthedocs.io/en/latest/submodules/appc.git/docs/APPC%20User%20Guide/APPC%20User%20Guide.html#interfaces-summary

SDC API (older June 2017)

see ONAP on Kubernetes#ListofContainers

Code Block
kubectl get svc --all-namespaces -o go-template='{{range .items}}{{range.spec.ports}}{{if .nodePort}}{{.name}} | {{.port}} | {{.nodePort}}{{"\n"}}{{end}}{{end}}{{end}}'

Raw output (Not updated)

...

logdemonode

(logging-analtyics project)

...

Code Block
titleSorted list of Node Ports
get svc --all-namespaces -o go-template='{{range .items}}{{range.spec.ports}}{{if .nodePort}}{{.nodePort}} | {{.name}} | {{.port}}{{"\n"}}{{end}}{{end}}{{end}}' | sort

Updated

...

As of 20171109 - filtered to include only containers that expose ports

...

model-loader-service

...

30210

...

30229

...

30232

...

aai-ssl

...

30233

...

APPC

...

appc-9090

...

dgbuilder

...

30228

...

clamp

...

8080

...

30295

...

30254

...

logdemonode

(optional RI example)

...

30280

...

30282

...

30208

...

Code Block
kubectl get services --all-namespaces | grep nodes

see ONAP on Kubernetes#ListofContainers

...

PREFIX 300

...

PREFIX 302

...

30256 (SDC)

30257 (SDC)

30208 (SDNC)

...

30261 (SDNC)

30262 (SDNC)

30263 (SDNC)

30264 (SDNC)

30265 (SDNC)

30266 (SDNC)

...

30241 (BUSCONTROLLER - http)

30242 (BUSCONTROLLER - https)

...

30246(AAI/ESR)

30247(AAI/ESR)

...

30255 (LOG)

30258 (LOG) logdemonode

...

30275 (OOF-OSDF)

30276 (OOF-HAS-API)

30277 (OOF-HAS-2)

30278 (OOF-HAS-3)

30279 (OOF-HAS-4)

30280 (OOF-HAS-5)

30281 (OOF-HAS-MUSIC)

30284 (CLAMP-DASH-KIBANA)

...

30272 (MYSQL)

30273 (MYSQL)

30234 (POMBA)

30249 (POMBA)

30259 unused

30269 unused

PREFIX 304

...

PREFIX 308

...