Port 2377Docker Swarm

Docker Swarm cluster management traffic between managers and nodes, including control-plane and consensus communication.

inCloud Virtualization

transport: tcp
in transit: encrypted
assignment: official
risk: 8/10
lookups: 0

also known as Docker Swarm manager, 2377/tcp

Technical Details

what runs on :2377

Docker Swarm uses TCP 2377 for its manager control plane, implemented by SwarmKit with gRPC over TLS. Normal deployments use mutually authenticated TLS with certificates issued by the Swarm CA, providing encrypted and authenticated node-to-manager communication. TCP/UDP 7946 carries node discovery and gossip, UDP 4789 carries encrypted overlay-network data, and Docker's separate API ports are typically 2375 (unencrypted) or 2376 (TLS).

Security Information

exposure of :2377

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

cloud averages 4.1 across 109 ports — this one sits 3.9 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

This port should not be exposed directly to the public internet. A reachable Swarm manager control plane presents a high-value administrative target; possession or compromise of valid Swarm client certificates can enable cluster management, while vulnerabilities in the Docker Engine or SwarmKit could provide a path to broader host or workload compromise. Restrict it to trusted cluster networks and protect the Swarm CA and node certificates.

Record

iana registry entry

port: :2377
service: Docker Swarm
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 8/10risk
category: Cloud Virtualization
usage: Docker Swarm manager nodes listen on TCP 2377 for cluster-management traffic. Workers connect to managers here, and managers use it for control-plane operations and Raft-based cluster state management; it is normally used alongside TCP/UDP 7946 and UDP 4789.
lookups: 0rank 994
added: 2026-09-22
updated: 2026-09-22
references: IANA service name registry — port 2377

Something wrong?

This record is maintained by the engineers who use port 2377. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-09-22.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 109 in cloud →

the 8 most looked-up other ports in cloud — 109 ports carry that label.

port	service	proto	category	risk	views
:8888	NewsEDGE	TCPUDP	Web Services	caution	83.3k
:9080	WebSphere HTTP Transport (default)	TCP	Web Services	caution	51.6k
:17500	Dropbox LAN Sync	TCPUDP	File Transfer	caution	43.7k
:7001	BEA WebLogic Server HTTP	TCP	Web Services	caution	31.6k
:9001	ETL Service Manager	TCPUDP	Databases	caution	28.6k
:9043	WebSphere Admin Console (SSL)	TCP	Web Services	caution	28.0k
:1337	PowerFolder P2P	TCP	Security	caution	27.1k
:6005	BMC Control-M Server	TCP	System	caution	27.1k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :2377Docker Swarm

Technical Details

Security Information

Related Ports

Port 2377Docker Swarm