Port 7009AFS remote cache manager

AFS remote cache manager service assigned to TCP and UDP port 7009.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
5/10

caution

lookups
0

rank 993 of 4,777 · top 21%

also known as afs3-rmtsys

Technical Details

what runs on :7009

AFS remote cache manager traffic uses the AFS Rx protocol and is assigned to both TCP and UDP, although AFS deployments traditionally use Rx over UDP. Rx provides packet framing, sequencing, acknowledgements, and service-specific operations; the service uses AFS authentication and security-class negotiation where configured. Port 7009 is part of the fixed AFS service range, alongside ports such as 7000 for the file server, 7001 for callbacks, and 7003 for the volume location service. Implementations commonly refer to this service as afs3-rmtsys.

Security Information

exposure of :7009

risk score

5/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.7 across 1,416 ports — this one sits 2.3 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

This service should normally be restricted to trusted AFS administration or client networks and should not be exposed to the Internet. AFS authentication can protect requests, but traffic is not encrypted by default in every deployment, and an exposed remote-system interface increases the attack surface of the AFS client or server. Restrict it with firewall rules and use the strongest available Rx security configuration.

the 8 most looked-up other ports in network services — 1,416 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted