Port 4189Path Computation Element Communication Protocol

PCEP carries path-computation requests and responses between routers and path computation elements in traffic-engineered networks.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
6/10

risk

lookups
0

rank 993 of 5,101 · top 19%

also known as pcep

Technical Details

what runs on :4189

PCEP uses TCP, with port 4189 as its default service port. A PCC typically establishes a TCP session to a PCE; the protocol begins with Open and Keepalive messages and then carries messages such as path computation requests and replies, reports, updates, and notifications. Each PCEP message has a common header containing its version, message type, and total length, which frames messages over the TCP byte stream. PCEP traffic is not encrypted by default; TLS for PCEP is specified as an option in RFC 8253.

Security Information

exposure of :4189

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,511 ports — this one sits 3.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

PCEP exposes network path-computation and, in stateful deployments, path-management functions; access can reveal topology or traffic-engineering information and may allow an authorized peer to affect network paths. The base protocol does not encrypt traffic, and TLS is optional, so restrict access to trusted control-plane peers and use appropriate authentication and transport protection. This is not normally a service that should be reachable from the public internet.

the 8 most looked-up other ports in network services — 1,511 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted