Port 22128GSI dCache Access Protocol

TCP service for secure Grid Security Infrastructure access to dCache storage.

transport
tcp

single transport

in transit
encrypted

payload protected on the wire

assignment
official

registered with iana

risk
5/10

caution

lookups
0

rank 993 of 5,255 · top 19%

also known as gsidcap

Technical Details

what runs on :22128

The service runs over TCP and accepts the GSI-enabled variant of dCache's native dCap protocol. A client establishes a GSI security context, authenticates with grid credentials, and then exchanges binary dCap requests for file access and related operations through the dCache door; the door may coordinate access to the backend pool hosting the file. The usual GSI dCap listener is TCP 22128, while ordinary dCap commonly uses TCP 22125.

Security Information

exposure of :22128

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

file transfer averages 3.4 across 178 ports — this one sits 1.6 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

GSI provides mutual authentication and cryptographic protection in normal deployments, but the service still exposes access to potentially sensitive storage. Internet exposure should generally be limited to trusted grid networks and controlled with certificate-based authorization, firewall rules, and current dCache software; an exposed door can be probed for protocol behavior and attacked for authentication or implementation weaknesses.

the 8 most looked-up other ports in file transfer — 178 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted