Port 8009NVMe over Fabrics Discovery Service

TCP port 8009 is the standard NVMe over Fabrics discovery service, used by hosts to find available storage subsystems.

transport
tcp

single transport

in transit
cleartext

payload readable on path

assignment
official

registered with iana

risk
4/10

caution

lookups
0

rank 993 of 5,961 · top 17%

also known as nvme-disc, NVMe-oF Discovery

1 other service is registered on port 8009. compare all 2 →

Technical Details

what runs on :8009

The registered service is the NVMe over Fabrics Discovery Service on TCP port 8009. A host establishes an NVMe/TCP connection to a discovery controller and requests its Discovery Log Page, which lists available subsystems and connection information; the host can then connect to an I/O subsystem separately. This is an NVMe protocol service, not an HTTP endpoint. Port 8009 is the conventional discovery port, while NVMe/TCP I/O commonly uses TCP 4420; deployments can configure different ports.

Security Information

exposure of :8009

risk score

4/ 10caution

worth attention. how exposed you are depends on configuration — don't leave it reachable from the internet without a reason.

network services averages 2.6 across 1,801 ports — this one sits 1.4 above.

in transit

cleartext

credentials and payloads are readable by anyone on path

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Discovery can reveal storage subsystem names, transport addresses, and other topology information, making an exposed service useful for reconnaissance. It does not by itself grant access to namespace data, but hosts may be able to connect to the advertised storage endpoints, so restrict discovery and I/O services to trusted networks and configure authentication where supported. Traffic is not encrypted by default; do not expose it to the public internet.

the 8 most looked-up other ports in network services — 1,801 ports carry that label.

risk mix of the 8 listed

  • caution100%

0 of 8 encrypted