# TransportClient accessing Cluster via single port **URL:** \ **Category:** Elasticsearch\ **Created:** [February 21, 2014, 10:10pm UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960 "2014-02-21T22:10:48Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![FFA](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@FFA](https://discuss.elastic.co/u/FFA)\ **Post date:** [February 21, 2014, 10:10pm UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960/1 "2014-02-21T22:10:48Z")
Multinode ES cluster is behind the firewall. I am using Java API TransportClient to query the ES. I have a simple question: Do I have to open all ports 9300-9400 on firewall to be able to access ES with TC? Is there ES settings that would allow me to open only let's say port 9300 on firewall and reliably get the query results back? Thanks, Fred. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [February 22, 2014, 2:50am UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960/2 "2014-02-22T02:50:19Z")
Just set transport port in elasticsearch.yml. But you can stay with defaults. As long as you start only one node, only 9300 needs to be opened. -- David 😉 Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs Le 21 févr. 2014 à 23:10, FFA [ffaliev@gmail.com](mailto:ffaliev@gmail.com) a écrit : Multinode ES cluster is behind the firewall. I am using Java API TransportClient to query the ES. I have a simple question: Do I have to open all ports 9300-9400 on firewall to be able to access ES with TC? Is there ES settings that would allow me to open only let's say port 9300 on firewall and reliably get the query results back? Thanks, ## Fred. You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/BBA70142-441A-45EA-86AA-F47451BD4010%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/BBA70142-441A-45EA-86AA-F47451BD4010%40pilato.fr). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![FFA](https://avatars.discourse-cdn.com/v4/letter/f/ccd318/32.png) [@FFA](https://discuss.elastic.co/u/FFA)\ **Post date:** [February 24, 2014, 2:56pm UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960/3 "2014-02-24T14:56:31Z")
Thank you. But what if multiple nodes have to be started to balance the load? Regards, FFA On Friday, February 21, 2014 8:50:19 PM UTC-6, David Pilato wrote: > Just set transport port in elasticsearch.yml. > But you can stay with defaults. As long as you start only one node, only > 9300 needs to be opened. > > -- > David 😉 > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > Le 21 févr. 2014 à 23:10, FFA \<[ffa...@gmail.com](mailto:ffa...@gmail.com) \\> a écrit : > > Multinode ES cluster is behind the firewall. I am using Java API > TransportClient to query the ES. > > I have a simple question: > Do I have to open all ports 9300-9400 on firewall to be able to access ES > with TC? Is there ES settings that would allow me to open only let's say > port 9300 on firewall and reliably get the query results back? > > Thanks, > > Fred. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com) > . > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/670ea0ce-237b-40d2-a6c3-68070a2171e5%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/670ea0ce-237b-40d2-a6c3-68070a2171e5%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![hari](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/hari/32/1582_2.png) [@hari](https://discuss.elastic.co/u/hari)\ **Post date:** [February 24, 2014, 9:01pm UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960/4 "2014-02-24T21:01:45Z")
you define your custom ports for additional nodes by setting transport.tcp.port and http.port in elasticsearch.yml and accordingly punch firewall rules only for those ports. On Monday, February 24, 2014 8:56:31 AM UTC-6, FFA wrote: > Thank you. But what if multiple nodes have to be started to balance the > load? > > Regards, > > FFA > > On Friday, February 21, 2014 8:50:19 PM UTC-6, David Pilato wrote: > > > Just set transport port in elasticsearch.yml. > > But you can stay with defaults. As long as you start only one node, only > > 9300 needs to be opened. > > > > -- > > David 😉 > > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > > > Le 21 févr. 2014 à 23:10, FFA [ffa...@gmail.com](mailto:ffa...@gmail.com) a écrit : > > > > Multinode ES cluster is behind the firewall. I am using Java API > > TransportClient to query the ES. > > > > I have a simple question: > > Do I have to open all ports 9300-9400 on firewall to be able to access > > ES with TC? Is there ES settings that would allow me to open only let's say > > port 9300 on firewall and reliably get the query results back? > > > > Thanks, > > > > Fred. > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/043d3612-e774-4bff-b6b9-1162f12b2b42%40googlegroups.com) > > . > > For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/2084b089-9f49-490d-8326-a50d161e42bf%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/2084b089-9f49-490d-8326-a50d161e42bf%40googlegroups.com). For more options, visit [https://groups.google.com/groups/opt\_out](https://groups.google.com/groups/opt_out). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:47am UTC](https://discuss.elastic.co/t/transportclient-accessing-cluster-via-single-port/15960/5 "2017-07-06T01:47:41Z")