Edit

Parallel Data Warehouse firewall configuration in Analytics Platform System (PDW)

  • Article

The Firewall page of the SQL Server PDW Configuration Manager enables you to enable or disable firewall rules that allow or prevent access to specific ports on the Analytics Platform System appliance.

Manage ports and firewall rules for appliance nodes

  1. Launch the Configuration Manager. For more information, see Launch the Configuration Manager (Analytics Platform System).

  2. In the left pane of the Configuration Manager, expand Parallel Data Warehouse Topology, and then select Firewall.

  3. Locate the port or firewall rule to update in the configuration list, and then select or clear the box next to that item. Only SQL Server PDW admin-configurable options are shown in this list, including opening and closing ports on externally facing nodes.

  4. Select Apply to save your changes.

Screenshot of the Microsoft Analytics Platform System Configuration Manager, showing the Firewall page.

External Ports

The following ports are opened for client connections coming from outside of PDW.

Purpose Port # Nodes
SQL Client access for PDW (TDS) 17001 CTL
Loader Client access (dwloader & SSIS) 8001 CTL
Remote desktop access 3389 CTL, CMP
SSIS BinaryLoaderDataChannel 16551 CTL
dwloader BinaryLoaderDataChannel 16551 CMP
SSL encrypted connections (For internal communications, to access the Admin Console) 443 All nodes
SQL Server PDW Load Control Flow - Windows Credentials 8002 CTL
_Kerberos 88 AD01 and AD02
_ldap 389 AD01 and AD02

Internal Ports

The following ports are used by PDW for internal communication, but are not opened for connections coming from outside of the PDW appliance.

Purpose Port # Nodes
DMS Control Channel traffic 16450 CTL, CMP
DMS Data Channel traffic 16550 CTL, CMP
Internal Diagnostics 16650 CTL, CMP
Failover status (DMS) 15000 CTL, CMP
Failover status (Engine) 15001 CMP
Dynamic (ephemeral) port range 20000-65535 CTL, CMP
SQL Server port ranges (TDS) 1433, 1500-1508 CTL, CMP

Note

Creating external tables or external data sources uses TCP port 8020 by default. These statements can be configured to use other ports instead. The Hortonworks JOB_TRACKER_LOCATION default port is 50300. Integrating with other systems and tools might require additional ports.

Related content