Port 7946Cluster Gossip (Serf / Docker Swarm)

Used for cluster-node discovery and gossip by Docker Swarm and HashiCorp Serf.

transport
tcp · udp

2 transports registered

in transit
cleartext

payload readable on path

assignment
unofficial

used by convention

risk
6/10

risk

lookups
0

rank 993 of 6,680 · top 15%

Technical Details

what runs on :7946

This port is used by more than one implementation, so there is no single wire protocol or handshake for it. Docker Swarm uses both TCP and UDP on 7946 for node communication and discovery; its other commonly required ports are TCP 2377 for cluster management and UDP 4789 for overlay network traffic. Serf also uses TCP and UDP 7946 by default for gossip. Serf encryption is configurable rather than enabled by default.

Security Information

exposure of :7946

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 2,029 ports — this one sits 3.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

unofficial

used by convention, not registered — what answers here varies by deployment

reachable over

tcp · udp

udp is connectionless — source addresses are trivially spoofed and it is a reflection favourite

security overview

Do not expose this port broadly to the internet: restrict it to the cluster nodes that need to communicate. The exact risk depends on the software using it; Serf gossip is not encrypted by default, while Docker Swarm documents encrypted management communication between nodes. Untrusted access to cluster communication ports can expose membership information or disrupt cluster operations.

the 8 most looked-up other ports in network services — 2,029 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted