Port 2380etcd Peer Port

etcd's internal TCP port for Raft replication and server-to-server cluster communication.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
8/10

risk

lookups
0

rank 994 of 4,021 · top 25%

also known as etcd-server, etcd 2380

Technical Details

what runs on :2380

The etcd peer transport runs over TCP and uses etcd's HTTP-based rafthttp protocol, with long-lived streams and HTTP requests carrying Raft messages, snapshots, and cluster-version information. The default peer URL is http://...:2380, so traffic is not encrypted unless peer TLS is explicitly configured with peer certificates and keys. Port 2379 is the separate client/API port.

Security Information

exposure of :2380

risk score

8/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

databases averages 3.2 across 124 ports — this one sits 4.8 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Do not expose this port to the public internet. An unprotected peer endpoint can allow unauthorized interaction with the cluster's replication and membership mechanisms, potentially disrupting the cluster or compromising data; restrict it to trusted etcd members and configure mutual TLS for peer traffic.

the 8 most looked-up other ports in databases — 124 ports carry that label.

risk mix of the 8 listed

  • caution100%

1 of 8 encrypted