Port 9345RKE2 Supervisor (Rancher Agent)

Rancher and RKE2 use TCP 9345 for the TLS-protected supervisor endpoint that registers and connects cluster nodes.

transport: tcp
in transit: encrypted
assignment: official
risk: 7/10
lookups: 0

also known as K3s supervisor

Technical Details

what runs on :9345

This is a TCP endpoint used by Rancher-associated cluster software; in RKE2 deployments, the server exposes a TLS-protected supervisor API on port 9345 for node registration and related cluster setup. It is distinct from the Kubernetes API server, normally on TCP 6443. It is not the Rancher web UI port, and Rancher-managed agents commonly connect to the Rancher server over HTTPS on 443.

Security Information

exposure of :9345

risk score

7/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

network services averages 2.6 across 1,850 ports — this one sits 4.4 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

Restrict access to cluster nodes that need to register or communicate with the supervisor; it is not intended as a general public-facing service. TLS protects traffic, but the endpoint is part of cluster management, so leaked bootstrap credentials or an overly broad network policy can increase the risk of unauthorized node enrollment or interference with cluster operations.

Record

iana registry entry

port: :9345
service: RKE2 Supervisor (Rancher Agent)
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 7/10risk
category: Network Services Cloud
usage: IANA assigns TCP 9345 to Rancher Agent, registered to Rancher Labs Inc. In practice, engineers commonly encounter it as the RKE2 (and related K3s) supervisor endpoint, where cluster agents and servers connect to a server for node registration and cluster setup.
lookups: 0rank 993
added: 2026-10-15
updated: 2026-10-15
references: IANA service name registry — port 9345

Something wrong?

This record is maintained by the engineers who use port 9345. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-15.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 1,850 in network services →

the 8 most looked-up other ports in network services — 1,850 ports carry that label.

port	service	proto	category	risk	views
:9080	Groove RPC	TCPUDP	Web Services	caution	70.8k
:6543	Jetnet	UDP	Network Services	caution	65.3k
:5938	TeamViewer	TCPUDP	Remote Access	caution	65.0k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3233	WhiskerControl Protocol	TCPUDP	Network Services	caution	61.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Tatsoft Default HTTP Proxy	TCP	Web Services	caution	46.8k

risk mix of the 8 listed

caution100%

0 of 8 encrypted

Port :9345RKE2 Supervisor (Rancher Agent)

Technical Details

Security Information

Related Ports

Port 9345RKE2 Supervisor (Rancher Agent)