# ElasticSearch and Firewall for dataless nodes

**URL:** https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760
**Category:** Elasticsearch
**Created:** [September 25, 2013, 10:51pm UTC](https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760 "2013-09-25T22:51:00Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Carofe](https://avatars.discourse-cdn.com/v4/letter/c/8baadc/32.png) [@Carofe](https://discuss.elastic.co/u/Carofe)
#### Post date: [September 25, 2013, 10:51pm UTC](https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760/1 "2013-09-25T22:51:00Z")

</div>

Hi,

I see that dataless nodes they not only connect to data nodes on port 9300  
but also they are listening on port 9300 on their machine too.  
Should I configure the firewall to allow incoming traffic to dataless nodes  
on port 9300? Is that a requirement to make the cluster work correctly?

Thanks,  
C.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![spinscale](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/spinscale/32/25011_2.png) [@spinscale](https://discuss.elastic.co/u/spinscale)
#### Post date: [October 3, 2013, 4:19pm UTC](https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760/2 "2013-10-03T16:19:45Z")

</div>

Hey,

all nodes must be able to communicate via port 9300 - which is the port  
used for internal cluster communication.  
Can you elaborate a bit on your setup? Just wondering, if your dataless  
nodes (client nodes I guess?) are not in the same network?

--Alex

On Thu, Sep 26, 2013 at 12:51 AM, Carofe [carlosrodrifernandez@gmail.com](mailto:carlosrodrifernandez@gmail.com)wrote:

> Hi,
> 
> I see that dataless nodes they not only connect to data nodes on port 9300  
> but also they are listening on port 9300 on their machine too.  
> Should I configure the firewall to allow incoming traffic to dataless  
> nodes on port 9300? Is that a requirement to make the cluster work  
> correctly?
> 
> Thanks,  
> C.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![Carofe](https://avatars.discourse-cdn.com/v4/letter/c/8baadc/32.png) [@Carofe](https://discuss.elastic.co/u/Carofe)
#### Post date: [October 25, 2013, 11:18pm UTC](https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760/3 "2013-10-25T23:18:23Z")

</div>

Thanks alexander!

On Thursday, October 3, 2013 9:19:45 AM UTC-7, Alexander Reelsen wrote:

> Hey,
> 
> all nodes must be able to communicate via port 9300 - which is the port  
> used for internal cluster communication.  
> Can you elaborate a bit on your setup? Just wondering, if your dataless  
> nodes (client nodes I guess?) are not in the same network?
> 
> --Alex
> 
> On Thu, Sep 26, 2013 at 12:51 AM, Carofe \<[carlosrodr...@gmail.com](mailto:carlosrodr...@gmail.com)\<javascript:\>
> 
> > wrote:
> 
> > Hi,
> > 
> > I see that dataless nodes they not only connect to data nodes on port  
> > 9300 but also they are listening on port 9300 on their machine too.  
> > Should I configure the firewall to allow incoming traffic to dataless  
> > nodes on port 9300? Is that a requirement to make the cluster work  
> > correctly?
> > 
> > Thanks,  
> > C.
> > 
> > --  
> > You received this message because you are subscribed to the Google Groups  
> > "elasticsearch" group.  
> > To unsubscribe from this group and stop receiving emails from it, send an  
> > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \<javascript:\>.  
> > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 2:10am UTC](https://discuss.elastic.co/t/elasticsearch-and-firewall-for-dataless-nodes/13760/4 "2017-07-06T02:10:30Z")

</div>


